last executing test programs: 1m16.9857798s ago: executing program 0 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x301, 0x70bd26, 0x5dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) r5 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 1m16.925785531s ago: executing program 0 (id=234): madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe) r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r0, &(0x7f0000003000), 0x200) read(r0, &(0x7f0000004000), 0x10) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x5}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xc}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000) process_vm_writev(r1, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4, &(0x7f0000000000)=[{0x6, 0x7, 0x1}, {0x1000000, 0xa64, 0x6e00}, {0x100000001, 0xce6f, 0x3}, {0x0, 0xf, 0x9}], 0x4, 0xcce, 0x5c, 0x8, 0x4a, 0x62}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x10010, r2, 0x8aa0b000) r3 = getpid() capget(&(0x7f0000002580)={0x19980330, r3}, &(0x7f00000025c0)={0x0, 0x2, 0x0, 0x4, 0x1, 0x101}) syz_pidfd_open(r3, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe) (async) openat(0xffffffffffffff9c, &(0x7f0000002000)='./proc/net/pppol2tp\x00', 0x0, 0x0) (async) read(r0, &(0x7f0000003000), 0x200) (async) read(r0, &(0x7f0000004000), 0x10) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x5}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xc}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000) (async) process_vm_writev(r1, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4, &(0x7f0000000000)=[{0x6, 0x7, 0x1}, {0x1000000, 0xa64, 0x6e00}, {0x100000001, 0xce6f, 0x3}, {0x0, 0xf, 0x9}], 0x4, 0xcce, 0x5c, 0x8, 0x4a, 0x62}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x10010, r2, 0x8aa0b000) (async) getpid() (async) capget(&(0x7f0000002580)={0x19980330, r3}, &(0x7f00000025c0)={0x0, 0x2, 0x0, 0x4, 0x1, 0x101}) (async) syz_pidfd_open(r3, 0x0) (async) 1m16.867726953s ago: executing program 0 (id=235): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x1000000, 0x0}) 1m16.063577214s ago: executing program 0 (id=237): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001740)=""/4082, 0xff2}], 0x1, 0x0, 0x18}, 0x700) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x8008, 0x4, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x25}}}}}) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x0, 0x0) read(r3, &(0x7f0000000d00), 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) shutdown(r3, 0x1) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 1m15.967662126s ago: executing program 0 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config\x00', 0x1ff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000880)={&(0x7f0000000380)=""/16, 0x10}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0x1ff) chdir(&(0x7f0000000380)='./config/usb_gadget/g1\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2802) r2 = syz_clone(0x8008a000, &(0x7f0000000400)="3f923ffaa71ed9fea3283a8c2ef75d411403eddac061b437b3fa809563789a3dd9ac480b13748e828b6b10b5154473b5ff50bfad501fda59f86c4c301d3738506bcace2222e51c1ff979faf3a1115b06c00caa921fdb8336ecdc516f63e196274f8848681a7d74c0728e217f367bcceb1e540303d7b6995f1dfd358efa1434c084dc4dda6f9e754fd0ed1ef51bfd7ca0f450c416c34928997a97e6713bf02e86687300b6830e997a95888884994f", 0xcf, &(0x7f00000001c0), &(0x7f00000004c0), &(0x7f0000000240)="dfc79d38ab039df177df64e79c9681f8bc218bd96007034c1a55e3bac8227ca9d6ae424b839845d045f17b22c63aee8225ab262ff2c3d5d57e24ead4324b06b8552a715c8dabe624732b9cca2be88df4db848c2c01e64e45632d56bab11dcbf1374a920490f1ea7ad71e4f978344c1db38f37e1fa6d1f35d2905255835cc5569198d3383d0208a67108c440276eff287c3a57edd60c64b3d56074af384fd0e430ea8da") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) capset(&(0x7f0000000300)={0x20071026, r2}, &(0x7f0000000540)={0x800000, 0x7ff, 0x10001, 0x1, 0x2b3, 0xfffffe00}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x5) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x4040000, 0x0, 0xffffffffffffffaf) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000600)=""/137, 0x89}) read(r5, &(0x7f0000001400)=""/4046, 0xffd8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0x5304}) 1m15.950711336s ago: executing program 0 (id=239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x2800, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000a40)={@ptr={0x66642a85, 0xffffffff, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0xf}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1m0.861373031s ago: executing program 32 (id=239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x2800, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000a40)={@ptr={0x66642a85, 0xffffffff, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0xf}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 30.095142854s ago: executing program 4 (id=611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet(0x2, 0x2, 0x1) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) unshare(0x60000600) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8010, r8, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) (rerun: 32) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) 29.726886733s ago: executing program 4 (id=613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x301, 0x70bd26, 0x5dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) r5 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 29.660440414s ago: executing program 4 (id=615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000001000)={0x0, 0x0, 0x2, 0xe5}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.598431556s ago: executing program 4 (id=617): r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@userxattr}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 29.539728117s ago: executing program 4 (id=618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.498859278s ago: executing program 4 (id=621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000240)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) socket$netlink(0x10, 0x3, 0x10) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x8d, {0x8d, 0x21, "7b99c498f40cab9ad5255449ba43fe59ca62dafdc8287ea5c6cad8eb9619ab6a490fc04842c686695d5802b56a391b04616ef8c6b31fdd8844d49094dbdc13bbffafa11f407535b8f41422b97419f733b8b8ec787d5ceee0a477ac3c96ab1e5b8e70d2a68e814020508ef01750477b1bfaaf458b6e930c9698355ee593f94f3cd154cbe1dea10fbf37de74"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, &(0x7f0000000100)={0x0, 0x22, 0x26, {[@main=@item_4={0x3, 0x0, 0x9, "a5ac38ee"}, @main=@item_4={0x3, 0x0, 0xc, "b7e089a5"}, @global=@item_012={0x2, 0x1, 0x4, "8f6d"}, @local=@item_4={0x3, 0x2, 0x5, "8ab18c46"}, @global=@item_4={0x3, 0x1, 0x4, "3621fd88"}, @global=@item_4={0x3, 0x1, 0x1, "709d9933"}, @global=@item_4={0x3, 0x1, 0x9, "14d556d7"}, @local=@item_012={0x2, 0x2, 0x0, "d199"}, @global=@item_012={0x1, 0x1, 0xb, 'o'}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x44e}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x16, 0xab, "01c1393947531f9c81f523d73644560e174b0206f9d95ba10433b964f55e334c42b63d61fa4ceabec7b59482842e700febc92ef8fcf287f0f35f215e93dee70f22d766a57059848895495aac595491118e8f8f0b4d432f9b54749af94cec4652bf62c17f77d3189624bc0ffc9d3abd5451a38ac06881c19e330cdfb0580321b6cf8ccc30c1d781aecdb045148255efd928be20db7146587af1bd98f809660359b0cca8047d894381d161ae"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1d}, &(0x7f0000000400)={0x20, 0x1, 0x26, "dce22b48490eb8169c4758e6bc17df5097f21babadf1a9cd9eb95939cf3dc804d1e326fe6b18"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x1}}) 29.424153021s ago: executing program 33 (id=621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000240)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) socket$netlink(0x10, 0x3, 0x10) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x8d, {0x8d, 0x21, "7b99c498f40cab9ad5255449ba43fe59ca62dafdc8287ea5c6cad8eb9619ab6a490fc04842c686695d5802b56a391b04616ef8c6b31fdd8844d49094dbdc13bbffafa11f407535b8f41422b97419f733b8b8ec787d5ceee0a477ac3c96ab1e5b8e70d2a68e814020508ef01750477b1bfaaf458b6e930c9698355ee593f94f3cd154cbe1dea10fbf37de74"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, &(0x7f0000000100)={0x0, 0x22, 0x26, {[@main=@item_4={0x3, 0x0, 0x9, "a5ac38ee"}, @main=@item_4={0x3, 0x0, 0xc, "b7e089a5"}, @global=@item_012={0x2, 0x1, 0x4, "8f6d"}, @local=@item_4={0x3, 0x2, 0x5, "8ab18c46"}, @global=@item_4={0x3, 0x1, 0x4, "3621fd88"}, @global=@item_4={0x3, 0x1, 0x1, "709d9933"}, @global=@item_4={0x3, 0x1, 0x9, "14d556d7"}, @local=@item_012={0x2, 0x2, 0x0, "d199"}, @global=@item_012={0x1, 0x1, 0xb, 'o'}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x44e}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x16, 0xab, "01c1393947531f9c81f523d73644560e174b0206f9d95ba10433b964f55e334c42b63d61fa4ceabec7b59482842e700febc92ef8fcf287f0f35f215e93dee70f22d766a57059848895495aac595491118e8f8f0b4d432f9b54749af94cec4652bf62c17f77d3189624bc0ffc9d3abd5451a38ac06881c19e330cdfb0580321b6cf8ccc30c1d781aecdb045148255efd928be20db7146587af1bd98f809660359b0cca8047d894381d161ae"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1d}, &(0x7f0000000400)={0x20, 0x1, 0x26, "dce22b48490eb8169c4758e6bc17df5097f21babadf1a9cd9eb95939cf3dc804d1e326fe6b18"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x1}}) 21.657680368s ago: executing program 5 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80842) read(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0xbfbb, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21.523613732s ago: executing program 5 (id=698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f538650f01c4b83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000222000032dbd70007bdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4) (async) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)=0xc) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000810) 21.453574133s ago: executing program 2 (id=699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.315928637s ago: executing program 5 (id=700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x301, 0x70bd26, 0x5dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) r5 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (fail_nth: 4) 21.17960087s ago: executing program 5 (id=702): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 21.179381281s ago: executing program 5 (id=703): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100090a000000007fffffff00000002"], 0x50}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000380)={{r1}, "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"}) 21.119414982s ago: executing program 5 (id=706): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100090a000000007fffffff00000002"], 0x50}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x3400) 21.034193014s ago: executing program 34 (id=706): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100090a000000007fffffff00000002"], 0x50}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x3400) 20.510450887s ago: executing program 2 (id=709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.593264021s ago: executing program 2 (id=715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001180)={{{@in=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000001100)=0x2a) sendmsg$nl_xfrm(r2, &(0x7f0000001440)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f00000016c0)=@report={0x204, 0x20, 0x1, 0x70bd25, 0x25dfdbfd, {0x33, {@in=@loopback, @in=@private=0xa010102, 0x4e22, 0xc997, 0x4e20, 0x0, 0xa, 0xa0, 0x0, 0x8, 0x0, r3}}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@remote, 0x2, 0xe, 0x30}}, @mark={0xc, 0x15, {0x35075b, 0x7}}, @sec_ctx={0x86, 0x8, {0x82, 0x8, 0x1, 0x1, 0x7a, "52d89f2733dffee8ee0b12061ab26f80b5e878b2dcadb607bc10933272231b3017d696919c699a09221bf14fd5ea5fae582ef98b3cb55b420fdcdddb194ba3697d1e16eac374ebeefae41f6842d0db45c4e0389b4dff70f95d18e16da210ba8c2e82bfdfe39d34e0b006aeb79dee1d2a7193bbd9a5d5a85ca8a7"}}, @coaddr={0x14, 0xe, @in6=@remote}, @tmpl={0x84, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x3505, 0x1, 0x6d485b7750fa885b, 0x9, 0x6, 0xb, 0xe}, {{@in=@multicast2, 0x4d2, 0x33}, 0xa, @in=@private=0xa010101, 0x34ff, 0x2, 0x1, 0xb5, 0x8, 0x9, 0x1ff}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x2}}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x1d}}, @lifetime_val={0x24, 0x9, {0x5, 0x8e6, 0x0, 0x200000000000007f}}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000}, 0x400c010) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) socketpair(0xf, 0x3, 0x2, &(0x7f0000003b40)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000001a40)={[0x0, 0xf1, 0x1, 0x6a4a, 0xffffffffffff7fff, 0x3, 0x1, 0x8, 0x8000000000000001, 0xa2f7, 0x1, 0x5, 0x0, 0x9, 0x80000001, 0x1]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') socket$inet6_udplite(0xa, 0x2, 0x88) openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 19.514666163s ago: executing program 2 (id=716): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131) write$binfmt_register(r0, &(0x7f0000000280)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x1, 0x3a, '($\'}', 0x3a, '', 0x3a, './cgroup', 0x3a, [0x50, 0x4f, 0x0, 0x43, 0x43, 0x46, 0x0]}, 0x33) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write(r1, &(0x7f0000000240)='oo', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) syz_ublk_setup_io_uring(0x4ebd, &(0x7f0000000100)={0x0, 0x89f2, 0x100, 0x1, 0xd1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r3 = syz_io_uring_complete(r2, 0x0) unshare(0x20060400) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r4, 0x0, 0x0, 0x5, 0x101, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000000)={0x10001, 0x3, 0x50000, 0x1000, &(0x7f00005f3000/0x1000)=nil, 0x1}) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=T,']) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f00000000c0)) inotify_init1(0x80800) 19.357395497s ago: executing program 2 (id=718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x301, 0x70bd26, 0x5dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) r5 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (fail_nth: 5) 19.046066975s ago: executing program 2 (id=719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x301, 0x70bd26, 0x5dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) r5 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000002340)={0x2020}, 0x2020) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 18.882230479s ago: executing program 35 (id=719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x301, 0x70bd26, 0x5dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) r5 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000002340)={0x2020}, 0x2020) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 5.888700219s ago: executing program 6 (id=808): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) write(r0, &(0x7f0000000100)="009c00011a2b3c4d0001000001000000", 0x10) clock_gettime(0x0, &(0x7f00000068c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000006640)=[{{&(0x7f0000000140)=@isdn, 0x80, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f00000004c0)=""/241, 0xf1}, {&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/133, 0x85}], 0x8, &(0x7f0000001940)=""/60, 0x3c}, 0x7f}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001980)=""/132, 0x84}, {&(0x7f0000001a40)=""/116, 0x74}], 0x2}, 0x9d6}, {{&(0x7f0000001b00)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b80)=""/90, 0x5a}, {&(0x7f0000001c00)=""/177, 0xb1}, {&(0x7f0000001cc0)=""/53, 0x35}, {&(0x7f0000001d00)=""/61, 0x3d}], 0x4, &(0x7f0000001d80)}, 0x4}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/62, 0x3e}, {&(0x7f0000002e00)=""/252, 0xfc}], 0x3}, 0x7fffffff}, {{&(0x7f0000002f40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002fc0)=""/249, 0xf9}, {&(0x7f00000030c0)=""/249, 0xf9}, {&(0x7f00000031c0)=""/104, 0x68}], 0x3, &(0x7f0000003280)=""/126, 0x7e}, 0xffffff25}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003300)=""/197, 0xc5}], 0x1, &(0x7f0000003440)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004440)=@un=@abs, 0x80, &(0x7f00000048c0)=[{&(0x7f00000044c0)=""/221, 0xdd}, {&(0x7f00000045c0)=""/247, 0xf7}, {&(0x7f00000046c0)=""/139, 0x8b}, {&(0x7f0000004780)=""/251, 0xfb}, {&(0x7f0000004880)=""/34, 0x22}], 0x5}, 0x8}, {{&(0x7f0000004940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000004d00)=[{&(0x7f00000049c0)=""/152, 0x98}, {&(0x7f0000004a80)=""/177, 0xb1}, {&(0x7f0000004b40)=""/116, 0x74}, {&(0x7f0000004bc0)=""/26, 0x1a}, {&(0x7f0000004c00)=""/244, 0xf4}], 0x5, &(0x7f0000004d80)=""/221, 0xdd}, 0x6}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000004e80)=""/17, 0x11}, {&(0x7f0000004ec0)=""/235, 0xeb}], 0x2, &(0x7f0000005000)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000006000)=@qipcrtr, 0x80, &(0x7f0000006500)=[{&(0x7f0000006080)=""/115, 0x73}, {&(0x7f0000006100)=""/21, 0x15}, {&(0x7f0000006140)=""/4, 0x4}, {&(0x7f0000006180)=""/246, 0xf6}, {&(0x7f0000006280)=""/249, 0xf9}, {&(0x7f0000006380)=""/126, 0x7e}, {&(0x7f0000006400)=""/236, 0xec}], 0x7, &(0x7f0000006580)=""/152, 0x98}, 0x4}], 0xa, 0x2000, &(0x7f0000006900)={r1, r2+60000000}) socket$nl_generic(0x10, 0x3, 0x10) 5.791718892s ago: executing program 6 (id=810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4) 5.198230637s ago: executing program 6 (id=812): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc069610000000000000003"], 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fsopen(&(0x7f0000000240)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="660f2933c4e1f9709120171b900dc4e3256b470ce8b92f020000b8ce3c0000ba000000000f30b9800000c00f3235000800000f30f40f20e035000040000f22e066baf80cb8d1028f8def66bafc0cb005ee650f01c9f30f1eca", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.879615365s ago: executing program 6 (id=813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x20, 0x1, 0x83, {0x83, 0x11, "b825e22228c051d592d74dcbb6b2c44acea2a322ba6ed41717a1ebbca811ee56628cffd1f2487407e3627103a75fe7f206100974d67b75e42b2faf93dfef3bd249e9ccd6efcbaf81c8f826946a1e37a0383bd0d1b0ee5930cc375bcbb72397b54b99b50b8ddfdaf7ced8d57d28aa5764642d851240d245781b783bac943714c16f"}}, 0x0}, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r3, 0x80000001, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.688201846s ago: executing program 6 (id=817): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000180)={&(0x7f0000000080)=[{0x7, 0x10000}, {0x7, 0x3ff}, {0x9, 0x1}, {0x8, 0x9, 0x1}], 0x4, 0x10, 0x3, 0xea1}) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000001200)=""/4109, &(0x7f0000000000)=0x100d) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x2, 0x3, 0xff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000001c0)=0x7, 0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x2001, 0x9, 0x0, 0x0, 0x6, 0x3}, 0x30, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'ip6gre0\x00', 0x800005}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2001, r5}, 0x0) syz_usb_connect$uac2(0x0, 0x80, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000000119026e0003010d0067080b0002010020ff0904000000010120bad2cd9df4ce7ac166f4edb7169d0ec10008000100800c0e000904010000010220000904010101010220000905010920000308fb08250101fffff9ff0904020000010220000904000100"/122], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0xc408655f104a227a, 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="ffd4b31201100100000010e499446a05280000000000000109022400010000a008090400fe01030003000921344d050122280009058103000406"], 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) pipe(0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r6, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) 3.087099241s ago: executing program 7 (id=821): syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x183242) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000480)="2df32a", 0x3}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000005740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005700)={&(0x7f0000005780)={0x5738, 0xd, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3f80, 0x3, 0x0, 0x1, [{0x698, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x294, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x81, 0x1, "642cff5af9abdd2bc91efbb7756b58878f4e804247fbe097d1bf19e0004142d2f49a898860be3964336f696606dab7149aadd61cf29e0251e409fa1c8c99fa4cae8588ea57a967ba7564427b834452a4a8c557933fdda220a48231f27da6fb0ba107dfb0fc59636490218a0d80266daa5ff00556f3c61a1c2e4a6f0d75"}, @NFTA_DATA_VALUE={0x89, 0x1, "f84d4a126a095ed55ac4070104db70d89b33aec4d7b1daa2587ec5576181fb1af5e339d97360c74c09a83cf44d7f56c2b24699d6bac4317e5318aac3f6319b87c7cb72ab08b89d7ccbfa9e0f4f15f829ce957e124cc7d97caec7c15bfbfe61cd2dcfd2ba7e43a640939fae935ed92880b3de6a00b2840093b0e4962c1658bce734ef556441"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x210, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x154, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x144, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x79, 0x3, "a3b0420649f6d6b30e7f6afeb8cb32e4edfdce9b9847ecc01523719e7279341b6b955eb3938a8139f8f167f2dcf19d0c95ab865901ed4a5a1df8d0d2ee8d84f9c74c312c882eb9c67fa50a6a1114339921ea6dbf8bc9d54a6e603f6294661ad46c68b896fb93380c05b7984c3e17e0f8d817eb2404"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x78, 0x3, "9538522b4feed0f9793a10b21dfd61b069937572c9251a47da651e4fb05a4949916519e00cea0eb60b01d22eccdb953790208545727a201e660162fbf855091156fdd8d82ee2030eb648c70ee40a35e1a39b714551cf59cb904b73ad9e026e59c191c2d59e938e81dba70b724c6d31dbd9572663"}, @NFTA_MATCH_NAME={0x8, 0x1, 'tos\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8f"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x78a4}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x88, 0x1, "2e4451178f2cbde7f43063041ef44269e12316afbc2b5f48b95ec78a38ce77ebcf2152f8fe9461e11ca16b44d372602e67b29fc57338908cf5439fc18c6c007cb89bfdf498a7b591cc49c2428ebcad17b0907e19e1fb1777f57b49e589684de736c92b743c93ecc46eecb5614140cd845bee3cbeaf6dba5abf9e727663769a9cc7217b57"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xc7570fd3f088191f}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x37, 0x1, "ead0d7a171449cf42ea5806620602985312481fc251f2bd12c7764efd2e93353b87c95100a4e100bc407e957868f126f2b6f6f"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}]}, {0x2074, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2070, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x40, 0x1, "da472ffcb22e53f1d656097b0d55bfe06f1cd1a3d2663174ecd1e68a853a92fb44b5373792163d79a18df1ebe46e25fe6d40a43408e84aecfee3335c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_LIMIT_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0x1818, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xfe, 0x1, "6319767c5d114d07139f0178410c1df7275b1ee14b4e89523fc13f4c718225b97df63cd8bfcf6586a00ece280989fcf274718c3c4f6a745bc2e1292ed1607c0f8b95e295cc0652d9591a7211538cc31c9bb1fe82ffab1a5e0f056f3631915b1a2d453036876e286511841405361f251abe770b92870a3fa5367d7350bf1f379b9dca8d1be06c769990257e84ceb9639b96ef1e9f3ce44271c8dabe77e02eeb0594d9ba3a393e38f76264b3a10c0920b9866a82a9927775341667a6b98ae225fda005ab307facd950e7dba9f5081abfe9cab45139a656146fb6a566492cb758564d84c1780719e74ca6e366ec544bc3af9e6c62452f6982ffe6ed"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x40, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY_END={0x428, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x64, 0x1, "60ddb33dec630b8611a667d66c90474050db843b781f7289db0a5e66fcb3b04fbf67f36c1893280d84c5f3c181d61f166bff6cf23e810ea4523ffb562ba1f83ade55104a42cc57e162e71d5a27960ea20a78078e5c8018f20b7101c605fa673a"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "955df998fd0d7d581a2a32ddb96476a4abc6ccbac5f1e39c4ed975f22d978bd4797def6960bdee7f91e83cc5f53397058412e301cb211fcc965858093f2bdd2da5922253aeb5ada69b70cbfb1e78ee8c698b79d6ccf138f0a078eed506a04551547c17640efa293bffa156798ce8031808b05f402972268e5dc26478c00593beee3dfad157c13067bf9c723bb64ba9356d7b545b12138d7ed148501d731d1544ef8ed2f4769bd1aad34e540dd40a9dfabb3ddde29a84ab1b805c2d58dc79971b672d34a2e3260613013733bc297e7a545091689daa4c665b55cbdcc08985a94ab4c1"}, @NFTA_DATA_VALUE={0xf3, 0x1, "3b19041886178a03893e14192c857daf0dc0f1119710c979b778b24463216ab2097a6fd4dab8f29e678cb8cf3077b0aaf7759a25e5075c23b449e06cffbab761ac278dc3127670d27d083783f06856e3b7fb4df5362dae19cd79fd319c38fd3c614bf3d1a86be23950b2106801307bf4c40547c80f7473e2f20a2c7cc02af442a367f1f12da3eea4b5ae208efcc5fa98e7dce8ccda89e3854aacd53645cb7658930fd03c15421b05abe370fdd6e26b0a41c45c1791faf4dff9e23c814c903afded746b20fa9cefacb5216c6cbed4e73514e9cfb6ff46ab77ed6c200fb84e5d3207d8aba90f91096d1a85d4a612e3f2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_DATA={0x278, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "5399b56eb9d5caf6bacffd4b7fe684779d417631a95ff49d409bffe26005cf0a857b23cdee242969b938a9f83c"}, @NFTA_DATA_VALUE={0xa7, 0x1, "d8913cef12f38f566146aa558dd4e35db57b6bc65a997657dc3162e5985d2c6d298cf0f529ff4a3c2a2a446f0c9d474e7797494b0d767f88951ff7e2012d86191fa9bfc5f16ea3c6421c185a1f88b9786821a418804bea458b8123a1ddff718f68982dada15765980cb1ec180f68f270c197cd361fb28489067a0cc07b9080865d6b72b908728480db75dc4a72c03fed4328cc867b67e80fe7d66b635b9e035eb3274d"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x40, 0x1, "1512490d89b1e46781ddcca66fb3d897f25752564ef2faa37663348314bbb77d1caadf05a2928234f749e2bc82fd66dc01f1f56e2416c0fc7f5fd916"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1780, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x68, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x63, 0x1, "6c67770379d7174cd7bf5e94167fcc3dc8b15a09c8c3c309beb5acb7d7c39944eec3025509230b382d895d1cf9aae33c9c8756318e1705470acaa66c86ee021b659c36af74ea21d60d9edb57ad04e85de3d411591f8b3fca123bc4b198d9c9"}]}]}, {0x13ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x15c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "c17141e39e4a2ea56e54105798a2995e128076a5ac8c10988fcf8a16284e90938d5da8be05f142f24e8bb961eb57066950fc8e5ac22d61e9e4737b7a35cfa5e9e1bf0099e0bcea286c435b8ea4bb4823bfd8977cb10609ca7937732301a5ad5b09538a818c461bfeb72d866ea1bca34b64f20d6d2d9f955dbb2b9c026df2472de37f0192c2a89803fb5e8a4a4138"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x10d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1025, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x27, 0x1, "f5c6612384726927c28f4820a2d844fbefe5039f178ea55e52a165daf5182453353e53"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x15c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "86b002427d350f6211dc804a198d322fd1145312379f3c3a01e63c4904327735275d2c835950f6"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x20, 0x1, "93aea0159909242e1a12cc9ff42ab404f6bf1784c47ed3c981aaf21c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "a02dc06fdb9a9d69ff5c325ff2881383486c46347361afd0b52c63bd73709cba750abe5203d025d8ef3b368a6d3140fea2491771562c2191cb171808890652ab0faa0134430c459de881cb8a30bb756233c285f81d95b66e3e04047bd05e44df2e8b45665e509fd81be999cb51f34971d1f79d69a65b26fb2c3e89e492425b8b02ff09d6fe76bcd8fd331aaea9f32a56ea1de249d324cae07ae21e66aa3718b597733de811f1adb1a800ddefce4797a72f1e993262eb36168a5910bc53"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}]}, {0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbf, 0x6, 0x1, 0x0, "19871d8260fc1898bc248bad928ce2cb8e11509090993def56c61e63d431903fc9944e0f61e9830f3a7b3275f02945c6a3ebff4c8c5afb2fa7c0ecfb46fb22095182dbeca0b9d3bf75cd42cfb1862d67d8585051acb23039e15b18336590696197ae5391268ddffb52bf7e2af9afd98dc23c3fbdc3dc246fee19f06e5ced45211cbd87efc88eccd5a143df8437aaa35b7ac9e08ce1798ccdfe689a30ac8aae588245653a3f6d0b3478b5d8baf19976aea14a0bfecc55178af194fc"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x260, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x1ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x91, 0x1, "22c48f40d8778b4a9cfd68f45e361f114dbd309be22d5751a7b3a2ea1db79f4b9389e868cdd890b8e751d0c8aa30a27b0ef429bc88e331402946f2c7bb3140cb8efaeae1c50eb3c5686c5991e4ba6fb781b41075b26aa3b42b5f56cafc343a468f4b2ad03cf215e72ea5142137bbd01bf19dde2f647e9c41951ae61a465d3f310ecb34374dc46bf389dd56074f"}, @NFTA_DATA_VALUE={0xe8, 0x1, "40082f0a5dc78aaf473c45a4ee670c70f61b3b5eb200c9724d8c4441b5274e18aa141e9e99d03b6f89e1bc3f7a50fadaa500bd1c67795ae1e6445756350b7b22174c66ea9215006d9822de58e82903fe8f72f8fc341efac5afc1486b8319a6ceb30154f4936e69e14219748388d5e1f6aa474b021c751402918be21bfa726805bc289529a8007587a972d64be9097039a5222e68f3e392a3896f5388764ac3272e4030507174e38967f683c60269454f697a834376ac0fcc5b022b802d4fb04f910d44658b54b4380e9d9427710b743965454e2b02c7d6b5c498dee79bec97ede9b1ce38"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x5738}, 0x1, 0x0, 0x0, 0x41}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syslog(0x3, 0x0, 0x0) memfd_create(&(0x7f00000002c0)='last\x00', 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) sendto(r5, &(0x7f00000000c0), 0x0, 0x8000, &(0x7f0000000180)=@xdp={0x2c, 0xa, r6, 0x20}, 0x80) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000200)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.021971493s ago: executing program 7 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000001000)={0x0, 0x0, 0x2, 0xe5}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.021788353s ago: executing program 7 (id=824): syz_usb_connect(0x0, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$pokeuser(0x6, r0, 0x380, 0x3) (async) syz_usb_connect$uac1(0x1, 0x118, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x106, 0x3, 0x1, 0x81, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3811, 0x30}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0x5, 0x9a, '?'}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0xf, ','}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0xb, '\"0'}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x1, 0x5, [0x5, 0x4, 0x2, 0x2, 0x2], 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xeb, 0x5, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x6, 0x8, "6098940103c60d0a86"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x81, 0x5, 0xa2, "cc404ccbeace416c21"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9, 0x4, 'P', '&'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x0, 0x0, "24d86d0d6a2cfc1790"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x90, 0xcd, 0xff, 0x7, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x40, 0x3, {0x7, 0x25, 0x1, 0x4, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd87a, 0xc, 0x6, 0xa}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x67, 0x4, 0x80, 0x9, "a1"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3b, 0x3, 0x3, 0x9, "448af7fef6f2c9"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x81, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x0, 0xf1, {0x7, 0x25, 0x1, 0x8, 0x61, 0x1}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0x8, 0x4, 0xff, 0x80}, 0x41, &(0x7f00000001c0)={0x5, 0xf, 0x41, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "e3612dab579fddf531d255aed5792890"}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7, 0xf000, 0x0, [0xff006f, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0xae, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1}]}, 0x8, [{0x96, &(0x7f0000000240)=@string={0x96, 0x3, "cc3a63761b23262b6d0371d1b814e11e60b2ce1d8b90cc3285e59b35275d51a64df5461cd1c1b20d927dfca3ae9d3c04eb35adaf8a7f059fc5b2043ebd6c6f5fe9ce87af0313d28a643e58808b8febb30e92749ed6c1c3154a141c5db9145b39895700788df339cef06a95aec0c56e1a99d39035b7eaa2c3d4b2fc569c3778064595f6f2751bd6f1bc0d1e61d3f6ac8881bcb6b3"}}, {0x82, &(0x7f00000006c0)=ANY=[@ANYBLOB="8203e029c01ca0961af73db7424219a028aa2202ddf8a0727f20414565d7fba542d616c718c72769466c025c6273bbda01d02713ac5c9afff3a07fa12d821fd8600888188cf7bd61dd969f54833403588685cf598e9ab42c753eca3e198324788b3e60a9f7b4ddb4138bd3816f7931c574367eeac8af5211d96514942ce52c6b96558ee922c3d998c0b9ae683bba81cb59dc00"/161]}, {0x36, &(0x7f00000003c0)=@string={0x36, 0x3, "4c83c772613f323ca86285421e393273df385903bac75e2fd8def80b18827c2ae5aa2b1cd56b4747ea71c621d1ae9ed876694b6f"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}, {0x24, &(0x7f0000000440)=@string={0x24, 0x3, "de818c5592ee01cca0950894579b7a070ffae3206766a0fa2f1b64c54bd543f34abd"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x446}}, {0xf0, &(0x7f00000004c0)=@string={0xf0, 0x3, "b28102ec53c408e3f372dec3b64fb74373e563ffe2aa629ef1360f1015ba4a1d6c3765599be2768f29978a0174b19782c3190d172656ac75ed97a9cac33a63d6cf5edd87a48dcde622a4e3bdab2e9b1ff8632fe72cda89cc6580060c5f28f681298fb78b6c197d13e093415583661d5a1639f86a53318861b5901102ca4d8f3a2eb3de7fe7ccbdefa349385ab691b57e7d1a23df9bbb3754fc8574d30fe4179135cfed9e5d216a71296cb304d2ff6d1d1dc4b410da683dbc675985808743006e3e0bc6d18916f5df2c90bf62a47b6a15d06f98b19c42a4afe6ed0a44c429c43bbd852e37fde13f23af799299d21a"}}, {0x4c, &(0x7f00000005c0)=@string={0x4c, 0x3, "58b547d866843762ac3caee2c2ef84e02f4fa8a2be3a27c54c768b6d1c1870ee714b3d938f93f686b14d1a8d0fc4fe744fb3f13cd73cc7f8d32560cf667b254bc09224397708b68bc4cf"}}]}) 2.953050114s ago: executing program 1 (id=826): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5) 2.423557898s ago: executing program 1 (id=828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0x0, 0x7f, 0x44233, 0x200000000007, 0x81, 0x941, 0x1, 0x1205, 0x4, 0x1000000004004, 0x0, 0xfffffdfffffffffd], 0x2, 0x84340}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000001000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x6c}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075d, 0xcd7}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.293494521s ago: executing program 1 (id=831): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00032d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.387580424s ago: executing program 7 (id=833): syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x3, 0x7, {0x7, 0x25, 0x1, 0x4, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x7, 0x6, {0x7, 0x25, 0x1, 0x4, 0x1, 0x6}}}}}}}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000002d80)=""/4087, 0xff7}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000380)=""/134, 0x86}, {&(0x7f0000001540)=""/144, 0x90}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/72, 0x48}], 0x9}, 0x800000e}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) recvmmsg(r0, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)=""/184, 0xb8}], 0x1}, 0x7}, {{&(0x7f0000000880)=@x25, 0x80, &(0x7f0000004f80)=[{&(0x7f0000000900)=""/202, 0xca}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/138, 0x8a}, {&(0x7f0000000b00)=""/251, 0xfb}, {&(0x7f0000000c00)=""/96, 0x60}, {&(0x7f0000000c80)=""/202, 0xca}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/203, 0xcb}, {&(0x7f0000004e80)=""/146, 0x92}, {&(0x7f0000004f40)=""/45, 0x2d}], 0xa, &(0x7f0000005040)=""/110, 0x6e}}, {{0x0, 0x0, &(0x7f00000050c0)}, 0x5}, {{&(0x7f0000005100)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000006540)=[{&(0x7f0000005180)=""/142, 0x8e}, {&(0x7f0000005240)=""/113, 0x71}, {&(0x7f00000052c0)=""/207, 0xcf}, {&(0x7f00000053c0)=""/134, 0x86}, {&(0x7f0000005480)=""/52, 0x34}, {&(0x7f00000054c0)=""/82, 0x52}, {&(0x7f0000005540)=""/4096, 0x1000}], 0x7}, 0xfe4}, {{&(0x7f00000065c0)=@l2, 0x80, &(0x7f0000006680)=[{&(0x7f0000006640)=""/58, 0x3a}], 0x1, &(0x7f00000066c0)=""/49, 0x31}, 0x5}, {{0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f0000006700)=""/146, 0x92}, {&(0x7f00000067c0)=""/133, 0x85}, {&(0x7f0000006880)=""/54, 0x36}], 0x3, &(0x7f0000006900)=""/4096, 0x1000}, 0xcac}, {{&(0x7f0000007900)=@caif=@dbg, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007980)=""/47, 0x2f}, {&(0x7f00000079c0)=""/56, 0x38}, {&(0x7f0000007a00)=""/176, 0xb0}, {&(0x7f0000007ac0)=""/46, 0x2e}, {&(0x7f0000007b00)=""/5, 0x5}, {&(0x7f0000007b40)=""/78, 0x4e}], 0x6, &(0x7f0000007c40)=""/32, 0x20}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000007d40)=[{&(0x7f0000007c80)=""/39, 0x27}, {&(0x7f0000007cc0)=""/127, 0x7f}], 0x2, &(0x7f0000007d80)=""/52, 0x34}, 0x1}], 0x8, 0x22003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) sendto(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x101, 0x8000, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000600)="53a98a4c0c370343d8e4a3a2b329897e24202043c3e892a2af01f64cb25cc0ed1ae068aff64124bb9f347596324bc73d3ec6a0a0a1c100f45cb6a0a204f5b797d941a4de9b97c2814816d9718a03e8286b96434a1c5660a21d1ac19f9d97af57df79586b5e7f271ab9859202cfdb88a6ca68cf4e2828860b3b1cd9506b6699897c32f32d3d6dffa30708efe8edb73fd5383899b50fcf79e22ba5cbcf5729e6daaaab8a17685d3262980267126c74fbae48fc91c6af987d7617fb7ce52bdfe56e697edc2704f2ded5dee802560ede1396", 0xd0, 0x21, &(0x7f0000000700)={0x2, 0x4e22, @broadcast}, 0x10) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r3, 0xb6376000) mmap(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r3, 0x108000) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x5b15, 0x100) ppoll(&(0x7f00000001c0)=[{r4, 0x8184}], 0x1, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0xffffffff, 0x4) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='read_timeout_ms=040000000006']) 613.595594ms ago: executing program 3 (id=836): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 552.772846ms ago: executing program 3 (id=837): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}, 0x4000004) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') socket$vsock_stream(0x28, 0x1, 0x0) getdents64(r0, &(0x7f0000000500)=""/162, 0xa2) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000011000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x22008006}, 0x0) 495.613857ms ago: executing program 3 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x301, 0x70bd26, 0x5dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) r5 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, 0x2, 0x3, 0x401, 0x0, 0x1f, {0x3, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 495.212357ms ago: executing program 6 (id=839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000001000)={0x0, 0x0, 0x2, 0xe5}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2042002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010}, 0x440c0) 464.728788ms ago: executing program 3 (id=840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000002200)='.\x00', 0x0, 0x199c65, 0x0) r5 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x101020, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000b40)=[@text32={0x20, 0x0}], 0x1, 0x9b0616eee07f8daf, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000001, 0x6, 0x4, 0x1, 0x6, 0xffff, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 320.944842ms ago: executing program 3 (id=841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x40000) 167.701075ms ago: executing program 3 (id=842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0xc00) 144.459756ms ago: executing program 1 (id=843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @loopback, 0x7}, 0x1c) shutdown(r0, 0x2) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040004, &(0x7f0000000000)={0xa, 0x4e22, 0x81, @empty, 0x7fffffff}, 0x1c) sendto(r1, &(0x7f00000000c0)="1e1a02f8045f40dec1eee1eda0a1358fc61764f0678eb2354b1b5f7972d8d8a583060b008d5676a814b496b5598751acd495188d3526e054fe90538588262f1e704b8a262cfa495499471986ca25e6c90ccdd6d2464dab555f566ac4f2eacb636c4b439b4a7ddc6e07fb12322dc050230ef3cc1b464316e3585fb35f", 0xfffffffffffffec5, 0x4048096, 0x0, 0x0) 140.945726ms ago: executing program 7 (id=844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 6) 47.708698ms ago: executing program 1 (id=845): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d332"], 0x23c}}, 0x4080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.034948ms ago: executing program 7 (id=846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000100001002cbc700000000000fc01000000000000000000000000000100000000000000000000ffff7f0000010000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}}, 0x44050) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="200026bdf000fbdbdf25190000000c00018008000300000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020076657468305f746f5f6261746164760018000180140002007767300000000000000000000000000020000180080003"], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x20004800) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x8, &(0x7f0000000a40)="47aaf63e3722d2a83d6b95a71d14ea166ec1bbec3c5baae7afd00a52a3543b68c1bda7e00de23c816f603aba4d37d816b52752b766b487aad71d38b670f6f3b3cc48ed3a5315da46c08b579ac8e19d569f448837157ea3057dc0648ec5c071b72aac5f9ba0fcf2002c8d131dad49288f1fc6a2cf9d1138215e83e17555d582393941219571a5d2efdf") r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x5, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffb, 0x200, 0x5, 0x15e, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5041, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x2, 0x2, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd, 0x0, r11}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x0, 0x0, 0x0}}, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000001000)={0x3, 0x2, 0xa}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x14, {0x3c4, 0xfffffffb, 0x0, 0x80000000, 0x5, 0xfff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r12, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r13, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r14 = accept(r12, 0x0, 0x0) setsockopt$sock_timeval(r14, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) recvfrom$inet6(r14, &(0x7f0000000080)=""/130, 0x82, 0x40000002, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000001180)=""/4105, &(0x7f00000010c0)=0x1009) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=847): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$tun(r1, 0x0, 0xfdef) r2 = gettid() signalfd(r1, &(0x7f0000000040)={[0x7]}, 0x8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000000c0)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r5, 0x5}) rt_sigprocmask(0x0, &(0x7f0000000080)={[0x8]}, &(0x7f00000000c0), 0x8) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r9 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r9, &(0x7f0000000180)="93a4bba63f5177c676d16083baf32c78dbf63fc00fcf0e96b3063ac0bcd7e2c3144d7e441ea7", 0x26) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x3}}, 0x2e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) getsockopt(r10, 0x111, 0xdf, 0x0, &(0x7f0000000200)) tkill(r2, 0x12) kernel console output (not intermixed with test programs): t find an available UDC or it's busy [ 98.180062][ T2169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.405213][ T66] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 98.555254][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 98.561786][ T66] usb 3-1: config 64 has an invalid interface number: 238 but max is 0 [ 98.570499][ T66] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 98.581285][ T66] usb 3-1: config 64 has no interface number 0 [ 98.587964][ T2179] FAULT_INJECTION: forcing a failure. [ 98.587964][ T2179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.601086][ T66] usb 3-1: config 64 interface 238 has no altsetting 0 [ 98.608871][ T2179] CPU: 1 UID: 0 PID: 2179 Comm: syz.4.594 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 98.608903][ T2179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.608918][ T2179] Call Trace: [ 98.608927][ T2179] [ 98.608936][ T2179] __dump_stack+0x21/0x30 [ 98.608996][ T2179] dump_stack_lvl+0x140/0x1c0 [ 98.609028][ T2179] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.609063][ T2179] dump_stack+0x19/0x20 [ 98.609094][ T2179] should_fail_ex+0x3c2/0x510 [ 98.609122][ T2179] should_fail+0xf/0x20 [ 98.609146][ T2179] should_fail_usercopy+0x1e/0x30 [ 98.609175][ T2179] _copy_from_user+0x20/0xa0 [ 98.609207][ T2179] _RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x721/0xb8e0 [ 98.609265][ T2179] ? __cfi__RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 98.609321][ T2179] ? is_bpf_text_address+0x17b/0x1a0 [ 98.609357][ T2179] ? kernel_text_address+0xa9/0xe0 [ 98.609390][ T2179] ? __kernel_text_address+0x11/0x40 [ 98.609421][ T2179] ? unwind_get_return_address+0x51/0x90 [ 98.609458][ T2179] ? is_bpf_text_address+0x17b/0x1a0 [ 98.609493][ T2179] ? kernel_text_address+0xa9/0xe0 [ 98.609524][ T2179] ? __kernel_text_address+0x11/0x40 [ 98.609555][ T2179] ? unwind_get_return_address+0x51/0x90 [ 98.609592][ T2179] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 98.609620][ T2179] ? arch_stack_walk+0x10a/0x170 [ 98.609647][ T2179] ? stack_depot_save_flags+0x38/0x800 [ 98.609676][ T2179] ? kasan_save_alloc_info+0x3a/0x50 [ 98.609714][ T2179] ? kasan_save_track+0x4f/0x80 [ 98.609741][ T2179] ? kasan_save_track+0x3e/0x80 [ 98.609766][ T2179] ? kasan_save_alloc_info+0x3a/0x50 [ 98.609800][ T2179] ? __kasan_kmalloc+0x96/0xb0 [ 98.609827][ T2179] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 98.609854][ T2179] ? krealloc_noprof+0x8d/0x130 [ 98.609878][ T2179] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x874/0x1a60 [ 98.609918][ T2179] ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x379/0x3fe0 [ 98.609952][ T2179] ? __se_sys_ioctl+0x132/0x1b0 [ 98.609979][ T2179] ? __x64_sys_ioctl+0x7f/0xa0 [ 98.610007][ T2179] ? x64_sys_call+0x1878/0x2ee0 [ 98.610027][ T2179] ? do_syscall_64+0x57/0xf0 [ 98.610054][ T2179] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.610092][ T2179] ? __kasan_kmalloc+0x96/0xb0 [ 98.610121][ T2179] ? kasan_save_alloc_info+0x3a/0x50 [ 98.610161][ T2179] ? __kasan_kmalloc+0x96/0xb0 [ 98.610190][ T2179] ? __kasan_check_write+0x18/0x20 [ 98.610214][ T2179] ? _raw_spin_lock+0x92/0x120 [ 98.610240][ T2179] ? __cfi__raw_spin_lock+0x10/0x10 [ 98.610268][ T2179] ? _raw_spin_unlock+0x45/0x60 [ 98.610294][ T2179] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0xff4/0x1a60 [ 98.610333][ T2179] ? __cfi_selinux_file_open+0x10/0x10 [ 98.610361][ T2179] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 98.610402][ T2179] ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x1952/0x3fe0 [ 98.610436][ T2179] ? __asan_memcpy+0x5a/0x80 [ 98.610460][ T2179] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x199a/0x3fe0 [ 98.610495][ T2179] ? __asan_set_shadow_00+0x12/0x20 [ 98.610528][ T2179] ? do_vfs_ioctl+0x182d/0x2010 [ 98.610561][ T2179] ? arch_stack_walk+0x10a/0x170 [ 98.610585][ T2179] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 98.610615][ T2179] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 98.610651][ T2179] ? _parse_integer+0x2e/0x40 [ 98.610678][ T2179] ? ioctl_has_perm+0x39a/0x500 [ 98.610702][ T2179] ? has_cap_mac_admin+0xd0/0xd0 [ 98.610729][ T2179] ? selinux_file_ioctl+0x732/0x1480 [ 98.610753][ T2179] ? vfs_write+0xbcf/0xfd0 [ 98.610776][ T2179] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 98.610798][ T2179] ? __cfi_vfs_write+0x10/0x10 [ 98.610822][ T2179] ? __kasan_check_write+0x18/0x20 [ 98.610846][ T2179] ? mutex_unlock+0x90/0x240 [ 98.610876][ T2179] ? __cfi_mutex_unlock+0x10/0x10 [ 98.610911][ T2179] ? bpf_lsm_file_ioctl+0xd/0x20 [ 98.610942][ T2179] ? security_file_ioctl+0x3e/0x110 [ 98.610977][ T2179] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 98.611011][ T2179] __se_sys_ioctl+0x132/0x1b0 [ 98.611040][ T2179] __x64_sys_ioctl+0x7f/0xa0 [ 98.611069][ T2179] x64_sys_call+0x1878/0x2ee0 [ 98.611090][ T2179] do_syscall_64+0x57/0xf0 [ 98.611116][ T2179] ? clear_bhb_loop+0x50/0xa0 [ 98.611147][ T2179] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.611177][ T2179] RIP: 0033:0x7f775359e019 [ 98.611197][ T2179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.611219][ T2179] RSP: 002b:00007f775450f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.611244][ T2179] RAX: ffffffffffffffda RBX: 00007f7753825fa0 RCX: 00007f775359e019 [ 98.611264][ T2179] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 98.611281][ T2179] RBP: 00007f775450f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.611297][ T2179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.611313][ T2179] R13: 00007f7753826038 R14: 00007f7753825fa0 R15: 00007fffd3519478 [ 98.611333][ T2179] [ 98.611454][ T2179] rust_binder: Write failure EFAULT in pid:180 [ 99.120818][ T66] usb 3-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a [ 99.136536][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.144728][ T66] usb 3-1: Product: syz [ 99.149144][ T66] usb 3-1: Manufacturer: syz [ 99.153802][ T66] usb 3-1: SerialNumber: syz [ 99.369342][ T66] uvcvideo 3-1:64.238: Found Unit with invalid ID 0 [ 99.385428][ T66] usb 3-1: Found UVC 0.00 device syz (046d:087c) [ 99.396486][ T66] usb 3-1: No valid video chain found. [ 99.411160][ T66] usb 3-1: USB disconnect, device number 25 [ 99.454926][ T2195] kvm: pic: non byte write [ 99.925201][ T493] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 100.100036][ T493] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 100.115156][ T493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.123221][ T493] usb 2-1: Product: syz [ 100.135156][ T493] usb 2-1: Manufacturer: syz [ 100.139804][ T493] usb 2-1: SerialNumber: syz [ 100.350893][ T493] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 100.364193][ T493] usb 2-1: USB disconnect, device number 31 [ 100.431102][ T2222] kvm: pic: non byte write [ 100.455200][ T311] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 100.517905][ T2225] FAULT_INJECTION: forcing a failure. [ 100.517905][ T2225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.531101][ T2225] CPU: 0 UID: 0 PID: 2225 Comm: syz.3.610 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 100.531138][ T2225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.531154][ T2225] Call Trace: [ 100.531162][ T2225] [ 100.531172][ T2225] __dump_stack+0x21/0x30 [ 100.531220][ T2225] dump_stack_lvl+0x140/0x1c0 [ 100.531250][ T2225] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.531283][ T2225] dump_stack+0x19/0x20 [ 100.531311][ T2225] should_fail_ex+0x3c2/0x510 [ 100.531337][ T2225] should_fail+0xf/0x20 [ 100.531360][ T2225] should_fail_usercopy+0x1e/0x30 [ 100.531387][ T2225] _copy_to_user+0x24/0xa0 [ 100.531416][ T2225] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x3370/0x3fe0 [ 100.531451][ T2225] ? __asan_set_shadow_00+0x12/0x20 [ 100.531476][ T2225] ? do_vfs_ioctl+0x182d/0x2010 [ 100.531495][ T2225] ? arch_stack_walk+0x10a/0x170 [ 100.531512][ T2225] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 100.531533][ T2225] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 100.531566][ T2225] ? _parse_integer+0x2e/0x40 [ 100.531594][ T2225] ? ioctl_has_perm+0x39a/0x500 [ 100.531610][ T2225] ? has_cap_mac_admin+0xd0/0xd0 [ 100.531628][ T2225] ? selinux_file_ioctl+0x732/0x1480 [ 100.531661][ T2225] ? vfs_write+0xbcf/0xfd0 [ 100.531678][ T2225] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 100.531694][ T2225] ? __cfi_vfs_write+0x10/0x10 [ 100.531710][ T2225] ? __kasan_check_write+0x18/0x20 [ 100.531726][ T2225] ? mutex_unlock+0x90/0x240 [ 100.531749][ T2225] ? __cfi_mutex_unlock+0x10/0x10 [ 100.531773][ T2225] ? bpf_lsm_file_ioctl+0xd/0x20 [ 100.531794][ T2225] ? security_file_ioctl+0x3e/0x110 [ 100.531819][ T2225] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 100.531848][ T2225] __se_sys_ioctl+0x132/0x1b0 [ 100.531868][ T2225] __x64_sys_ioctl+0x7f/0xa0 [ 100.531887][ T2225] x64_sys_call+0x1878/0x2ee0 [ 100.531902][ T2225] do_syscall_64+0x57/0xf0 [ 100.531920][ T2225] ? clear_bhb_loop+0x50/0xa0 [ 100.531942][ T2225] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.531963][ T2225] RIP: 0033:0x7fd6ec39e019 [ 100.531978][ T2225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.531992][ T2225] RSP: 002b:00007fd6ed217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.532010][ T2225] RAX: ffffffffffffffda RBX: 00007fd6ec625fa0 RCX: 00007fd6ec39e019 [ 100.532022][ T2225] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 100.532033][ T2225] RBP: 00007fd6ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 100.532044][ T2225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.532054][ T2225] R13: 00007fd6ec626038 R14: 00007fd6ec625fa0 R15: 00007ffe6dc08308 [ 100.532068][ T2225] [ 100.834992][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 100.845664][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 100.856374][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 8 [ 100.863835][ T2229] kvm: pic: non byte write [ 100.867215][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 16, setting to 8 [ 100.882221][ T311] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 100.892794][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 100.903980][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 101.070617][ T36] audit: type=1400 audit(1785833719.242:357): avc: denied { unmount } for pid=1522 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.147736][ T698] bridge_slave_1: left allmulticast mode [ 101.155209][ T698] bridge_slave_1: left promiscuous mode [ 101.161301][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.169609][ T698] bridge_slave_0: left allmulticast mode [ 101.175485][ T698] bridge_slave_0: left promiscuous mode [ 101.181246][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.297642][ T698] veth1_macvtap: left promiscuous mode [ 101.303220][ T698] veth0_vlan: left promiscuous mode [ 101.430976][ T2256] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.438152][ T2256] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.447229][ T2256] bridge_slave_0: entered allmulticast mode [ 101.453645][ T2256] bridge_slave_0: entered promiscuous mode [ 101.460814][ T2256] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.468177][ T2256] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.475560][ T2256] bridge_slave_1: entered allmulticast mode [ 101.481972][ T2256] bridge_slave_1: entered promiscuous mode [ 101.549625][ T2256] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.556778][ T2256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.564067][ T2256] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.571353][ T2256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.598845][ T696] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.606831][ T696] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.622575][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.629683][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.641694][ T696] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.648799][ T696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.680341][ T2256] veth0_vlan: entered promiscuous mode [ 101.707741][ T2256] veth1_macvtap: entered promiscuous mode [ 101.726601][ T2265] kvm: pic: non byte write [ 101.773327][ T2271] syzkaller1: entered promiscuous mode [ 101.779721][ T2271] syzkaller1: entered allmulticast mode [ 101.812154][ T2273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 101.845525][ T2276] FAULT_INJECTION: forcing a failure. [ 101.845525][ T2276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.862776][ T2276] CPU: 0 UID: 0 PID: 2276 Comm: syz.3.628 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 101.862813][ T2276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.862828][ T2276] Call Trace: [ 101.862836][ T2276] [ 101.862846][ T2276] __dump_stack+0x21/0x30 [ 101.862882][ T2276] dump_stack_lvl+0x140/0x1c0 [ 101.862913][ T2276] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.862946][ T2276] ? check_stack_object+0x138/0x150 [ 101.862970][ T2276] dump_stack+0x19/0x20 [ 101.862999][ T2276] should_fail_ex+0x3c2/0x510 [ 101.863027][ T2276] should_fail+0xf/0x20 [ 101.863051][ T2276] should_fail_usercopy+0x1e/0x30 [ 101.863079][ T2276] _copy_to_user+0x24/0xa0 [ 101.863110][ T2276] simple_read_from_buffer+0xed/0x160 [ 101.863143][ T2276] proc_fail_nth_read+0x1aa/0x220 [ 101.863174][ T2276] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 101.863207][ T2276] ? bpf_lsm_file_permission+0xd/0x20 [ 101.863236][ T2276] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 101.863268][ T2276] vfs_read+0x28b/0xc70 [ 101.863290][ T2276] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 101.863325][ T2276] ? __cfi_vfs_read+0x10/0x10 [ 101.863348][ T2276] ? __kasan_check_write+0x18/0x20 [ 101.863371][ T2276] ? mutex_lock+0x97/0x1d0 [ 101.863402][ T2276] ? __cfi_mutex_lock+0x10/0x10 [ 101.863436][ T2276] ksys_read+0x145/0x260 [ 101.863458][ T2276] ? __cfi_ksys_read+0x10/0x10 [ 101.863482][ T2276] ? __kasan_check_read+0x15/0x20 [ 101.863505][ T2276] __x64_sys_read+0x7f/0x90 [ 101.863538][ T2276] x64_sys_call+0x2638/0x2ee0 [ 101.863560][ T2276] do_syscall_64+0x57/0xf0 [ 101.863584][ T2276] ? clear_bhb_loop+0x50/0xa0 [ 101.863616][ T2276] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.863645][ T2276] RIP: 0033:0x7fd6ec35e84e [ 101.863664][ T2276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.863684][ T2276] RSP: 002b:00007fd6ed216fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.863710][ T2276] RAX: ffffffffffffffda RBX: 00007fd6ed2176c0 RCX: 00007fd6ec35e84e [ 101.863727][ T2276] RDX: 000000000000000f RSI: 00007fd6ed2170a0 RDI: 0000000000000004 [ 101.863762][ T2276] RBP: 00007fd6ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 101.863777][ T2276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.863790][ T2276] R13: 00007fd6ec626038 R14: 00007fd6ec625fa0 R15: 00007ffe6dc08308 [ 101.863814][ T2276] [ 102.194225][ T2284] kvm: pic: non byte write [ 102.275237][ T36] audit: type=1400 audit(1785833720.442:358): avc: denied { setattr } for pid=2288 comm="syz.5.633" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 102.496220][ T36] audit: type=1400 audit(1785833720.672:359): avc: denied { nlmsg_write } for pid=2300 comm="syz.5.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 102.519460][ T2301] syzkaller1: entered promiscuous mode [ 102.524972][ T2301] syzkaller1: entered allmulticast mode [ 102.870425][ T2316] kvm: pic: non byte write [ 103.068522][ T2327] FAULT_INJECTION: forcing a failure. [ 103.068522][ T2327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.081952][ T2327] CPU: 1 UID: 0 PID: 2327 Comm: syz.3.646 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 103.081985][ T2327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.081999][ T2327] Call Trace: [ 103.082005][ T2327] [ 103.082014][ T2327] __dump_stack+0x21/0x30 [ 103.082046][ T2327] dump_stack_lvl+0x140/0x1c0 [ 103.082072][ T2327] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.082100][ T2327] ? _parse_integer+0x2e/0x40 [ 103.082120][ T2327] ? kstrtoull+0x13b/0x1e0 [ 103.082139][ T2327] dump_stack+0x19/0x20 [ 103.082164][ T2327] should_fail_ex+0x3c2/0x510 [ 103.082194][ T2327] should_fail+0xf/0x20 [ 103.082214][ T2327] should_fail_usercopy+0x1e/0x30 [ 103.082237][ T2327] _copy_from_user+0x20/0xa0 [ 103.082263][ T2327] ___sys_sendmsg+0x1c7/0x370 [ 103.082284][ T2327] ? __sys_sendmsg+0x2a0/0x2a0 [ 103.082304][ T2327] ? proc_fail_nth_write+0x184/0x220 [ 103.082332][ T2327] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 103.082364][ T2327] ? __fget_files+0x2bc/0x330 [ 103.082389][ T2327] __x64_sys_sendmsg+0x206/0x2e0 [ 103.082409][ T2327] ? fput+0x1a4/0x230 [ 103.082434][ T2327] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 103.082454][ T2327] ? ksys_write+0x1f3/0x260 [ 103.082475][ T2327] ? __kasan_check_read+0x15/0x20 [ 103.082496][ T2327] x64_sys_call+0x2a4c/0x2ee0 [ 103.082514][ T2327] do_syscall_64+0x57/0xf0 [ 103.082536][ T2327] ? clear_bhb_loop+0x50/0xa0 [ 103.082562][ T2327] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.082587][ T2327] RIP: 0033:0x7fd6ec39e019 [ 103.082603][ T2327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.082621][ T2327] RSP: 002b:00007fd6ed217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.082641][ T2327] RAX: ffffffffffffffda RBX: 00007fd6ec625fa0 RCX: 00007fd6ec39e019 [ 103.082656][ T2327] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000006 [ 103.082670][ T2327] RBP: 00007fd6ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 103.082683][ T2327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.082696][ T2327] R13: 00007fd6ec626038 R14: 00007fd6ec625fa0 R15: 00007ffe6dc08308 [ 103.082713][ T2327] [ 103.329185][ T2328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.338654][ T2328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.375017][ T311] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 103.384883][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.401893][ T311] usb 3-1: can't set config #1, error -71 [ 103.408696][ T311] usb 3-1: USB disconnect, device number 26 [ 103.555232][ T66] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 103.705249][ T66] usb 6-1: Using ep0 maxpacket: 16 [ 103.711610][ T66] usb 6-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 103.722561][ T66] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 103.735659][ T66] usb 6-1: config 0 interface 0 has no altsetting 0 [ 103.742268][ T66] usb 6-1: New USB device found, idVendor=0eef, idProduct=726b, bcdDevice= 0.00 [ 103.751620][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.760581][ T66] usb 6-1: config 0 descriptor?? [ 104.169032][ T66] hid-generic 0003:0EEF:726B.0007: item fetching failed at offset 13/40 [ 104.178047][ T66] hid-generic 0003:0EEF:726B.0007: probe with driver hid-generic failed with error -22 [ 104.369575][ T10] usb 6-1: USB disconnect, device number 2 [ 104.400521][ T2363] kvm: pic: non byte write [ 104.469797][ T2366] netlink: 80 bytes leftover after parsing attributes in process `syz.3.659'. [ 104.487218][ T2368] netlink: 80 bytes leftover after parsing attributes in process `syz.3.659'. [ 104.506290][ T493] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 104.665212][ T493] usb 2-1: Using ep0 maxpacket: 16 [ 104.675644][ T493] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 104.684625][ T493] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 104.692309][ T493] usb 2-1: can't read configurations, error -61 [ 104.771819][ T2379] FAULT_INJECTION: forcing a failure. [ 104.771819][ T2379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.784987][ T2379] CPU: 0 UID: 0 PID: 2379 Comm: syz.3.663 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 104.785023][ T2379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.785038][ T2379] Call Trace: [ 104.785047][ T2379] [ 104.785058][ T2379] __dump_stack+0x21/0x30 [ 104.785101][ T2379] dump_stack_lvl+0x140/0x1c0 [ 104.785155][ T2379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.785187][ T2379] ? _parse_integer_limit+0x195/0x1e0 [ 104.785211][ T2379] ? check_stack_object+0x138/0x150 [ 104.785241][ T2379] dump_stack+0x19/0x20 [ 104.785263][ T2379] should_fail_ex+0x3c2/0x510 [ 104.785281][ T2379] should_fail+0xf/0x20 [ 104.785298][ T2379] should_fail_usercopy+0x1e/0x30 [ 104.785317][ T2379] _copy_from_user+0x20/0xa0 [ 104.785339][ T2379] __copy_msghdr+0x3d0/0x5c0 [ 104.785356][ T2379] ___sys_sendmsg+0x214/0x370 [ 104.785372][ T2379] ? __sys_sendmsg+0x2a0/0x2a0 [ 104.785394][ T2379] ? proc_fail_nth_write+0x184/0x220 [ 104.785418][ T2379] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 104.785445][ T2379] ? __fget_files+0x2bc/0x330 [ 104.785465][ T2379] __x64_sys_sendmsg+0x206/0x2e0 [ 104.785482][ T2379] ? fput+0x1a4/0x230 [ 104.785502][ T2379] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 104.785530][ T2379] ? ksys_write+0x1f3/0x260 [ 104.785548][ T2379] ? __kasan_check_read+0x15/0x20 [ 104.785566][ T2379] x64_sys_call+0x2a4c/0x2ee0 [ 104.785581][ T2379] do_syscall_64+0x57/0xf0 [ 104.785599][ T2379] ? clear_bhb_loop+0x50/0xa0 [ 104.785621][ T2379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.785642][ T2379] RIP: 0033:0x7fd6ec39e019 [ 104.785656][ T2379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.785670][ T2379] RSP: 002b:00007fd6ed217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.785688][ T2379] RAX: ffffffffffffffda RBX: 00007fd6ec625fa0 RCX: 00007fd6ec39e019 [ 104.785700][ T2379] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000006 [ 104.785712][ T2379] RBP: 00007fd6ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 104.785723][ T2379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.785733][ T2379] R13: 00007fd6ec626038 R14: 00007fd6ec625fa0 R15: 00007ffe6dc08308 [ 104.785748][ T2379] [ 105.010311][ T493] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 105.165210][ T493] usb 2-1: Using ep0 maxpacket: 16 [ 105.170745][ T493] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 105.179637][ T493] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 105.187348][ T493] usb 2-1: can't read configurations, error -61 [ 105.193762][ T493] usb usb2-port1: attempt power cycle [ 105.456167][ T2402] tipc: Started in network mode [ 105.461203][ T2402] tipc: Node identity 1, cluster identity 4711 [ 105.467426][ T2402] tipc: Node number set to 1 [ 105.472937][ T2402] tipc: New replicast peer: 127.0.0.1 [ 105.478699][ T2402] tipc: Enabled bearer , priority 10 [ 105.486070][ T2402] tipc: Disabling bearer [ 105.545250][ T493] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 105.575588][ T493] usb 2-1: Using ep0 maxpacket: 16 [ 105.581113][ T493] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 105.591920][ T493] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 105.615162][ T493] usb 2-1: can't read configurations, error -61 [ 105.755206][ T493] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 105.767375][ T36] audit: type=1400 audit(1785833723.942:360): avc: denied { mount } for pid=2409 comm="syz.5.674" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 105.804515][ T493] usb 2-1: Using ep0 maxpacket: 16 [ 105.809798][ T36] audit: type=1400 audit(1785833723.972:361): avc: denied { unmount } for pid=2256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 105.834441][ T493] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 105.854543][ T493] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 105.862269][ T493] usb 2-1: can't read configurations, error -61 [ 105.868931][ T493] usb usb2-port1: unable to enumerate USB device [ 105.890836][ T2414] kvm: pic: non byte write [ 106.018916][ T2425] FAULT_INJECTION: forcing a failure. [ 106.018916][ T2425] name failslab, interval 1, probability 0, space 0, times 0 [ 106.031719][ T2425] CPU: 0 UID: 0 PID: 2425 Comm: syz.3.680 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 106.031754][ T2425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.031770][ T2425] Call Trace: [ 106.031778][ T2425] [ 106.031786][ T2425] __dump_stack+0x21/0x30 [ 106.031822][ T2425] dump_stack_lvl+0x140/0x1c0 [ 106.031851][ T2425] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.031884][ T2425] ? release_sock+0x171/0x1f0 [ 106.031914][ T2425] dump_stack+0x19/0x20 [ 106.031944][ T2425] should_fail_ex+0x3c2/0x510 [ 106.031970][ T2425] should_failslab+0xac/0x100 [ 106.031997][ T2425] kmem_cache_alloc_node_noprof+0x45/0x420 [ 106.032021][ T2425] ? netlink_data_ready+0x20/0x20 [ 106.032058][ T2425] ? __alloc_skb+0x10c/0x360 [ 106.032089][ T2425] __alloc_skb+0x10c/0x360 [ 106.032121][ T2425] netlink_alloc_large_skb+0xf7/0x1b0 [ 106.032155][ T2425] netlink_sendmsg+0x576/0xad0 [ 106.032180][ T2425] ? __cfi_netlink_sendmsg+0x10/0x10 [ 106.032205][ T2425] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 106.032232][ T2425] ? security_socket_sendmsg+0x3d/0x100 [ 106.032265][ T2425] ____sys_sendmsg+0x9a1/0xa00 [ 106.032291][ T2425] ? __import_iovec+0x5b9/0x7d0 [ 106.032325][ T2425] ? __sys_sendmsg_sock+0x50/0x50 [ 106.032351][ T2425] ? import_iovec+0x80/0xb0 [ 106.032384][ T2425] ___sys_sendmsg+0x2a6/0x370 [ 106.032409][ T2425] ? __sys_sendmsg+0x2a0/0x2a0 [ 106.032442][ T2425] ? proc_fail_nth_write+0x184/0x220 [ 106.032477][ T2425] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 106.032516][ T2425] ? __fget_files+0x2bc/0x330 [ 106.032543][ T2425] __x64_sys_sendmsg+0x206/0x2e0 [ 106.032567][ T2425] ? fput+0x1a4/0x230 [ 106.032596][ T2425] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 106.032619][ T2425] ? ksys_write+0x1f3/0x260 [ 106.032644][ T2425] ? __kasan_check_read+0x15/0x20 [ 106.032669][ T2425] x64_sys_call+0x2a4c/0x2ee0 [ 106.032690][ T2425] do_syscall_64+0x57/0xf0 [ 106.032715][ T2425] ? clear_bhb_loop+0x50/0xa0 [ 106.032745][ T2425] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.032775][ T2425] RIP: 0033:0x7fd6ec39e019 [ 106.032796][ T2425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.032817][ T2425] RSP: 002b:00007fd6ed217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.032843][ T2425] RAX: ffffffffffffffda RBX: 00007fd6ec625fa0 RCX: 00007fd6ec39e019 [ 106.032860][ T2425] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000006 [ 106.032876][ T2425] RBP: 00007fd6ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 106.032891][ T2425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.032906][ T2425] R13: 00007fd6ec626038 R14: 00007fd6ec625fa0 R15: 00007ffe6dc08308 [ 106.032927][ T2425] [ 106.058390][ T2427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.681'. [ 106.127668][ T36] audit: type=1400 audit(1785833724.302:362): avc: denied { accept } for pid=2426 comm="syz.5.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.595262][ T418] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 107.622123][ T2452] kvm: pic: non byte write [ 107.765177][ T418] usb 6-1: Using ep0 maxpacket: 32 [ 107.775986][ T418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.795167][ T418] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 107.812076][ T418] usb 6-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice= 0.00 [ 107.825228][ T45] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 107.835147][ T418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.843216][ T418] usb 6-1: SerialNumber: syz [ 107.857442][ T418] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 107.877709][ T418] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 107.912610][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.967161][ T2463] incfs: Options parsing error. -22 [ 107.972454][ T2463] incfs: mount failed -22 [ 107.978153][ T36] audit: type=1400 audit(1785833726.152:363): avc: denied { create } for pid=2462 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 108.007012][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 108.023084][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.027799][ T2465] FAULT_INJECTION: forcing a failure. [ 108.027799][ T2465] name failslab, interval 1, probability 0, space 0, times 0 [ 108.035560][ T45] usb 3-1: config 7 has an invalid interface number: 20 but max is 0 [ 108.051546][ T2465] CPU: 0 UID: 0 PID: 2465 Comm: syz.1.695 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 108.051578][ T2465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.051592][ T2465] Call Trace: [ 108.051600][ T2465] [ 108.051610][ T2465] __dump_stack+0x21/0x30 [ 108.051644][ T2465] dump_stack_lvl+0x140/0x1c0 [ 108.051674][ T2465] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.051706][ T2465] ? avc_has_perm+0x155/0x240 [ 108.051794][ T2465] ? __cfi_avc_has_perm+0x10/0x10 [ 108.051874][ T2465] dump_stack+0x19/0x20 [ 108.051935][ T2465] should_fail_ex+0x3c2/0x510 [ 108.052005][ T2465] should_failslab+0xac/0x100 [ 108.052076][ T2465] __kmalloc_cache_noprof+0x41/0x470 [ 108.052146][ T2465] ? vhost_task_create+0x12c/0x3f0 [ 108.052209][ T2465] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 108.052281][ T2465] vhost_task_create+0x12c/0x3f0 [ 108.052356][ T2465] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 108.052429][ T2465] ? __cfi_vhost_task_create+0x10/0x10 [ 108.052499][ T2465] ? __cfi_vhost_task_fn+0x10/0x10 [ 108.052560][ T2465] ? __kasan_check_write+0x18/0x20 [ 108.052620][ T2465] ? mutex_lock+0x97/0x1d0 [ 108.052695][ T2465] ? __cfi_mutex_lock+0x10/0x10 [ 108.052775][ T2465] ? kernel_text_address+0xa9/0xe0 [ 108.052850][ T2465] kvm_mmu_post_init_vm+0x161/0x300 [ 108.052933][ T2465] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 108.053013][ T2465] ? _parse_integer_limit+0x195/0x1e0 [ 108.053077][ T2465] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 108.053166][ T2465] ? kstrtoull+0x13b/0x1e0 [ 108.053239][ T2465] ? kstrtouint+0x78/0xf0 [ 108.053318][ T2465] ? ioctl_has_perm+0x1bc/0x500 [ 108.053380][ T2465] ? __asan_memcpy+0x5a/0x80 [ 108.053442][ T2465] ? ioctl_has_perm+0x408/0x500 [ 108.053482][ T2465] ? has_cap_mac_admin+0xd0/0xd0 [ 108.053536][ T2465] ? __kasan_check_write+0x18/0x20 [ 108.053591][ T2465] ? mutex_lock_killable+0x97/0x1d0 [ 108.053682][ T2465] ? __cfi_mutex_lock_killable+0x10/0x10 [ 108.053765][ T2465] ? proc_fail_nth_write+0x184/0x220 [ 108.053852][ T2465] kvm_vcpu_ioctl+0xa43/0x1000 [ 108.053907][ T2465] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 108.053966][ T2465] ? __cfi_vfs_write+0x10/0x10 [ 108.054028][ T2465] ? __kasan_check_write+0x18/0x20 [ 108.054081][ T2465] ? mutex_unlock+0x90/0x240 [ 108.054163][ T2465] ? __cfi_mutex_unlock+0x10/0x10 [ 108.054248][ T2465] ? bpf_lsm_file_ioctl+0xd/0x20 [ 108.054320][ T2465] ? security_file_ioctl+0x3e/0x110 [ 108.054420][ T2465] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 108.054474][ T2465] __se_sys_ioctl+0x132/0x1b0 [ 108.054552][ T2465] __x64_sys_ioctl+0x7f/0xa0 [ 108.054645][ T2465] x64_sys_call+0x1878/0x2ee0 [ 108.054712][ T2465] do_syscall_64+0x57/0xf0 [ 108.054793][ T2465] ? clear_bhb_loop+0x50/0xa0 [ 108.054875][ T2465] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.054951][ T2465] RIP: 0033:0x7fbb5db9e019 [ 108.055004][ T2465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.055054][ T2465] RSP: 002b:00007fbb5eaf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.055118][ T2465] RAX: ffffffffffffffda RBX: 00007fbb5de25fa0 RCX: 00007fbb5db9e019 [ 108.055160][ T2465] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 108.055199][ T2465] RBP: 00007fbb5eaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.055239][ T2465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.055272][ T2465] R13: 00007fbb5de26038 R14: 00007fbb5de25fa0 R15: 00007ffcbc0a3488 [ 108.055330][ T2465] [ 108.181768][ T2466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=2466 comm=syz.5.687 [ 108.186938][ T45] usb 3-1: config 7 has no interface number 0 [ 108.419210][ T45] usb 3-1: config 7 interface 20 has no altsetting 0 [ 108.427764][ T45] usb 3-1: New USB device found, idVendor=04e6, idProduct=1010, bcdDevice=26.5d [ 108.437087][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.445276][ T45] usb 3-1: Product: syz [ 108.449526][ T45] usb 3-1: Manufacturer: syz [ 108.454192][ T45] usb 3-1: SerialNumber: syz [ 108.468333][ T493] usb 6-1: USB disconnect, device number 3 [ 108.664992][ T45] ums-usbat 3-1:7.20: USB Mass Storage device detected [ 108.682544][ T45] ums-usbat 3-1:7.20: Quirks match for vid 04e6 pid 1010: 1 [ 108.721169][ T45] usb 3-1: USB disconnect, device number 27 [ 109.160157][ T2476] SELinux: ebitmap: map size 2585547753 does not match my size 64 (high bit was 704179291) [ 109.160157][ T36] audit: type=1400 audit(1785833727.332:364): avc: denied { load_policy } for pid=2475 comm="syz.5.698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 109.207709][ T2476] SELinux: failed to load policy [ 109.521916][ T698] bridge_slave_1: left allmulticast mode [ 109.527714][ T698] bridge_slave_1: left promiscuous mode [ 109.533636][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.542528][ T698] bridge_slave_0: left allmulticast mode [ 109.551663][ T2495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.705'. [ 109.555254][ T698] bridge_slave_0: left promiscuous mode [ 109.575264][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.727867][ T698] veth1_macvtap: left promiscuous mode [ 109.733450][ T698] veth0_vlan: left promiscuous mode [ 109.846522][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.853836][ T2501] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.860993][ T2501] bridge_slave_0: entered allmulticast mode [ 109.867718][ T2501] bridge_slave_0: entered promiscuous mode [ 109.874536][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.881862][ T2501] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.889245][ T2501] bridge_slave_1: entered allmulticast mode [ 109.895772][ T2501] bridge_slave_1: entered promiscuous mode [ 109.945163][ T1538] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 109.957755][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.964830][ T2501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.972177][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.979248][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.003788][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.011161][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.027270][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.034461][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.044046][ T698] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.051141][ T698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.086184][ T2501] veth0_vlan: entered promiscuous mode [ 110.097683][ T2501] veth1_macvtap: entered promiscuous mode [ 110.107759][ T1538] usb 2-1: config 0 has no interfaces? [ 110.113375][ T1538] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 110.122611][ T1538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.134707][ T1538] usb 2-1: config 0 descriptor?? [ 110.336476][ T2514] FAULT_INJECTION: forcing a failure. [ 110.336476][ T2514] name failslab, interval 1, probability 0, space 0, times 0 [ 110.364739][ T1538] usb 2-1: USB disconnect, device number 36 [ 110.374810][ T2514] CPU: 1 UID: 0 PID: 2514 Comm: syz.6.711 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 110.374840][ T2514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.374853][ T2514] Call Trace: [ 110.374860][ T2514] [ 110.374868][ T2514] __dump_stack+0x21/0x30 [ 110.374900][ T2514] dump_stack_lvl+0x140/0x1c0 [ 110.374927][ T2514] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.374955][ T2514] dump_stack+0x19/0x20 [ 110.374981][ T2514] should_fail_ex+0x3c2/0x510 [ 110.375003][ T2514] should_failslab+0xac/0x100 [ 110.375028][ T2514] kmem_cache_alloc_node_noprof+0x45/0x420 [ 110.375049][ T2514] ? dup_task_struct+0xc1/0xd80 [ 110.375073][ T2514] ? kasan_save_alloc_info+0x3a/0x50 [ 110.375102][ T2514] ? __kasan_kmalloc+0x96/0xb0 [ 110.375137][ T2514] ? __kmalloc_cache_noprof+0x23c/0x470 [ 110.375166][ T2514] dup_task_struct+0xc1/0xd80 [ 110.375194][ T2514] ? __kasan_check_write+0x18/0x20 [ 110.375218][ T2514] ? _raw_spin_lock_irq+0x93/0x120 [ 110.375245][ T2514] ? copy_process+0x3350/0x3350 [ 110.375275][ T2514] ? __kasan_check_write+0x18/0x20 [ 110.375297][ T2514] copy_process+0x57c/0x3350 [ 110.375329][ T2514] ? kasan_save_alloc_info+0x3a/0x50 [ 110.375362][ T2514] ? __cfi_copy_process+0x10/0x10 [ 110.375390][ T2514] ? __kmalloc_cache_noprof+0x23c/0x470 [ 110.375415][ T2514] ? __kasan_check_write+0x18/0x20 [ 110.375438][ T2514] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 110.375464][ T2514] vhost_task_create+0x1f7/0x3f0 [ 110.375488][ T2514] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 110.375516][ T2514] ? __cfi_vhost_task_create+0x10/0x10 [ 110.375543][ T2514] ? __cfi_vhost_task_fn+0x10/0x10 [ 110.375568][ T2514] ? __kasan_check_write+0x18/0x20 [ 110.375591][ T2514] ? mutex_lock+0x97/0x1d0 [ 110.375635][ T2514] ? __cfi_mutex_lock+0x10/0x10 [ 110.375665][ T2514] ? kernel_text_address+0xa9/0xe0 [ 110.375699][ T2514] kvm_mmu_post_init_vm+0x161/0x300 [ 110.375734][ T2514] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 110.375765][ T2514] ? _parse_integer_limit+0x195/0x1e0 [ 110.375791][ T2514] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 110.375822][ T2514] ? kstrtoull+0x13b/0x1e0 [ 110.375844][ T2514] ? kstrtouint+0x78/0xf0 [ 110.375867][ T2514] ? ioctl_has_perm+0x1bc/0x500 [ 110.375890][ T2514] ? __asan_memcpy+0x5a/0x80 [ 110.375913][ T2514] ? ioctl_has_perm+0x408/0x500 [ 110.375936][ T2514] ? has_cap_mac_admin+0xd0/0xd0 [ 110.375958][ T2514] ? __kasan_check_write+0x18/0x20 [ 110.375981][ T2514] ? mutex_lock_killable+0x97/0x1d0 [ 110.376014][ T2514] ? __cfi_mutex_lock_killable+0x10/0x10 [ 110.376048][ T2514] ? proc_fail_nth_write+0x184/0x220 [ 110.376084][ T2514] kvm_vcpu_ioctl+0xa43/0x1000 [ 110.376108][ T2514] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 110.376130][ T2514] ? __cfi_vfs_write+0x10/0x10 [ 110.376155][ T2514] ? __kasan_check_write+0x18/0x20 [ 110.376178][ T2514] ? mutex_unlock+0x90/0x240 [ 110.376211][ T2514] ? __cfi_mutex_unlock+0x10/0x10 [ 110.376246][ T2514] ? bpf_lsm_file_ioctl+0xd/0x20 [ 110.376276][ T2514] ? security_file_ioctl+0x3e/0x110 [ 110.376311][ T2514] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 110.376334][ T2514] __se_sys_ioctl+0x132/0x1b0 [ 110.376363][ T2514] __x64_sys_ioctl+0x7f/0xa0 [ 110.376390][ T2514] x64_sys_call+0x1878/0x2ee0 [ 110.376411][ T2514] do_syscall_64+0x57/0xf0 [ 110.376434][ T2514] ? clear_bhb_loop+0x50/0xa0 [ 110.376460][ T2514] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.376485][ T2514] RIP: 0033:0x7fdc8039e019 [ 110.376502][ T2514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.376519][ T2514] RSP: 002b:00007fdc7edf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.376540][ T2514] RAX: ffffffffffffffda RBX: 00007fdc80625fa0 RCX: 00007fdc8039e019 [ 110.376555][ T2514] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 110.376568][ T2514] RBP: 00007fdc7edf7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.376580][ T2514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.376592][ T2514] R13: 00007fdc80626038 R14: 00007fdc80625fa0 R15: 00007ffc0caf4778 [ 110.376617][ T2514] [ 110.981050][ T36] audit: type=1400 audit(1785833729.152:365): avc: denied { create } for pid=2520 comm="syz.3.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 111.296665][ T36] audit: type=1400 audit(1785833729.472:366): avc: denied { read } for pid=300 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 111.359900][ T36] audit: type=1400 audit(1785833729.472:367): avc: denied { open } for pid=300 comm="syz-executor" path="/155/my_tracefs" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 111.411319][ T36] audit: type=1400 audit(1785833729.472:368): avc: denied { write } for pid=300 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 111.458233][ T36] audit: type=1400 audit(1785833729.472:369): avc: denied { setattr } for pid=300 comm="syz-executor" path="/155/my_tracefs/instances" dev="tracefs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 111.557834][ T696] bridge_slave_1: left allmulticast mode [ 111.563558][ T696] bridge_slave_1: left promiscuous mode [ 111.581909][ T696] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.601218][ T696] bridge_slave_0: left allmulticast mode [ 111.611794][ T696] bridge_slave_0: left promiscuous mode [ 111.624172][ T696] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.742727][ T696] veth1_macvtap: left promiscuous mode [ 111.759758][ T696] veth0_vlan: left promiscuous mode [ 111.972164][ T2533] kvm: pic: non byte write [ 112.070239][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.077468][ T2535] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.084640][ T2535] bridge_slave_0: entered allmulticast mode [ 112.091526][ T2535] bridge_slave_0: entered promiscuous mode [ 112.098711][ T2535] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.106041][ T2535] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.113211][ T2535] bridge_slave_1: entered allmulticast mode [ 112.120053][ T2535] bridge_slave_1: entered promiscuous mode [ 112.227258][ T2535] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.234476][ T2535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.241853][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.248940][ T2535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.301848][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.309674][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.325850][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.333043][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.358104][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.365317][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.422434][ T2535] veth0_vlan: entered promiscuous mode [ 112.438303][ T2535] veth1_macvtap: entered promiscuous mode [ 112.669454][ T2557] FAULT_INJECTION: forcing a failure. [ 112.669454][ T2557] name failslab, interval 1, probability 0, space 0, times 0 [ 112.682287][ T2557] CPU: 1 UID: 0 PID: 2557 Comm: syz.1.728 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 112.682321][ T2557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.682344][ T2557] Call Trace: [ 112.682352][ T2557] [ 112.682362][ T2557] __dump_stack+0x21/0x30 [ 112.682398][ T2557] dump_stack_lvl+0x140/0x1c0 [ 112.682429][ T2557] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.682462][ T2557] dump_stack+0x19/0x20 [ 112.682491][ T2557] should_fail_ex+0x3c2/0x510 [ 112.682517][ T2557] should_failslab+0xac/0x100 [ 112.682543][ T2557] __kmalloc_cache_node_noprof+0x46/0x430 [ 112.682568][ T2557] ? __get_vm_area_node+0x150/0x390 [ 112.682599][ T2557] ? kasan_save_alloc_info+0x3a/0x50 [ 112.682633][ T2557] ? __kasan_slab_alloc+0x73/0x90 [ 112.682658][ T2557] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 112.682683][ T2557] __get_vm_area_node+0x150/0x390 [ 112.682715][ T2557] __vmalloc_node_range_noprof+0x340/0x1300 [ 112.682750][ T2557] ? copy_process+0x57c/0x3350 [ 112.682783][ T2557] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 112.682818][ T2557] ? kasan_save_alloc_info+0x3a/0x50 [ 112.682851][ T2557] ? __kasan_slab_alloc+0x73/0x90 [ 112.682878][ T2557] ? arch_dup_task_struct+0x5b/0xe0 [ 112.682912][ T2557] ? __asan_memcpy+0x5a/0x80 [ 112.682935][ T2557] dup_task_struct+0x5d6/0xd80 [ 112.682963][ T2557] ? copy_process+0x57c/0x3350 [ 112.682990][ T2557] ? _raw_spin_lock_irq+0x93/0x120 [ 112.683016][ T2557] ? copy_process+0x3350/0x3350 [ 112.683044][ T2557] ? __kasan_check_write+0x18/0x20 [ 112.683068][ T2557] copy_process+0x57c/0x3350 [ 112.683099][ T2557] ? kasan_save_alloc_info+0x3a/0x50 [ 112.683133][ T2557] ? __cfi_copy_process+0x10/0x10 [ 112.683160][ T2557] ? __kmalloc_cache_noprof+0x23c/0x470 [ 112.683204][ T2557] ? __kasan_check_write+0x18/0x20 [ 112.683244][ T2557] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 112.683290][ T2557] vhost_task_create+0x1f7/0x3f0 [ 112.683315][ T2557] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 112.683353][ T2557] ? __cfi_vhost_task_create+0x10/0x10 [ 112.683379][ T2557] ? __cfi_vhost_task_fn+0x10/0x10 [ 112.683403][ T2557] ? __kasan_check_write+0x18/0x20 [ 112.683425][ T2557] ? mutex_lock+0x97/0x1d0 [ 112.683456][ T2557] ? __cfi_mutex_lock+0x10/0x10 [ 112.683485][ T2557] ? kernel_text_address+0xa9/0xe0 [ 112.683518][ T2557] kvm_mmu_post_init_vm+0x161/0x300 [ 112.683554][ T2557] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 112.683595][ T2557] ? _parse_integer_limit+0x195/0x1e0 [ 112.683628][ T2557] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 112.683669][ T2557] ? kstrtoull+0x13b/0x1e0 [ 112.683701][ T2557] ? kstrtouint+0x78/0xf0 [ 112.683732][ T2557] ? ioctl_has_perm+0x1bc/0x500 [ 112.683762][ T2557] ? __asan_memcpy+0x5a/0x80 [ 112.683793][ T2557] ? ioctl_has_perm+0x408/0x500 [ 112.683821][ T2557] ? has_cap_mac_admin+0xd0/0xd0 [ 112.683850][ T2557] ? __kasan_check_write+0x18/0x20 [ 112.683881][ T2557] ? mutex_lock_killable+0x97/0x1d0 [ 112.683922][ T2557] ? __cfi_mutex_lock_killable+0x10/0x10 [ 112.683964][ T2557] ? proc_fail_nth_write+0x184/0x220 [ 112.684008][ T2557] kvm_vcpu_ioctl+0xa43/0x1000 [ 112.684041][ T2557] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 112.684072][ T2557] ? __cfi_vfs_write+0x10/0x10 [ 112.684104][ T2557] ? __kasan_check_write+0x18/0x20 [ 112.684134][ T2557] ? mutex_unlock+0x90/0x240 [ 112.684173][ T2557] ? __cfi_mutex_unlock+0x10/0x10 [ 112.684217][ T2557] ? bpf_lsm_file_ioctl+0xd/0x20 [ 112.684255][ T2557] ? security_file_ioctl+0x3e/0x110 [ 112.684299][ T2557] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 112.684329][ T2557] __se_sys_ioctl+0x132/0x1b0 [ 112.684373][ T2557] __x64_sys_ioctl+0x7f/0xa0 [ 112.684409][ T2557] x64_sys_call+0x1878/0x2ee0 [ 112.684439][ T2557] do_syscall_64+0x57/0xf0 [ 112.684472][ T2557] ? clear_bhb_loop+0x50/0xa0 [ 112.684512][ T2557] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.684550][ T2557] RIP: 0033:0x7fbb5db9e019 [ 112.684573][ T2557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.684595][ T2557] RSP: 002b:00007fbb5eaf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.684622][ T2557] RAX: ffffffffffffffda RBX: 00007fbb5de25fa0 RCX: 00007fbb5db9e019 [ 112.684647][ T2557] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 112.684669][ T2557] RBP: 00007fbb5eaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.684688][ T2557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.684710][ T2557] R13: 00007fbb5de26038 R14: 00007fbb5de25fa0 R15: 00007ffcbc0a3488 [ 112.684735][ T2557] [ 112.736698][ T2557] syz.1.728: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 113.154150][ T2557] CPU: 0 UID: 0 PID: 2557 Comm: syz.1.728 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 113.154184][ T2557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.154199][ T2557] Call Trace: [ 113.154207][ T2557] [ 113.154216][ T2557] __dump_stack+0x21/0x30 [ 113.154251][ T2557] dump_stack_lvl+0x140/0x1c0 [ 113.154283][ T2557] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.154316][ T2557] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 113.154345][ T2557] dump_stack+0x19/0x20 [ 113.154375][ T2557] warn_alloc+0x1e7/0x2c0 [ 113.154406][ T2557] ? __kasan_kmalloc+0x28/0xb0 [ 113.154434][ T2557] ? __cfi_warn_alloc+0x10/0x10 [ 113.154464][ T2557] ? __get_vm_area_node+0x150/0x390 [ 113.154496][ T2557] ? kasan_save_alloc_info+0x3a/0x50 [ 113.154532][ T2557] ? __get_vm_area_node+0x382/0x390 [ 113.154565][ T2557] __vmalloc_node_range_noprof+0x365/0x1300 [ 113.154605][ T2557] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 113.154640][ T2557] ? kasan_save_alloc_info+0x3a/0x50 [ 113.154675][ T2557] ? __kasan_slab_alloc+0x73/0x90 [ 113.154702][ T2557] ? arch_dup_task_struct+0x5b/0xe0 [ 113.154737][ T2557] ? __asan_memcpy+0x5a/0x80 [ 113.154760][ T2557] dup_task_struct+0x5d6/0xd80 [ 113.154788][ T2557] ? copy_process+0x57c/0x3350 [ 113.154825][ T2557] ? _raw_spin_lock_irq+0x93/0x120 [ 113.154850][ T2557] ? copy_process+0x3350/0x3350 [ 113.154879][ T2557] ? __kasan_check_write+0x18/0x20 [ 113.154903][ T2557] copy_process+0x57c/0x3350 [ 113.154935][ T2557] ? kasan_save_alloc_info+0x3a/0x50 [ 113.154970][ T2557] ? __cfi_copy_process+0x10/0x10 [ 113.154998][ T2557] ? __kmalloc_cache_noprof+0x23c/0x470 [ 113.155024][ T2557] ? __kasan_check_write+0x18/0x20 [ 113.155047][ T2557] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 113.155074][ T2557] vhost_task_create+0x1f7/0x3f0 [ 113.155099][ T2557] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 113.155128][ T2557] ? __cfi_vhost_task_create+0x10/0x10 [ 113.155154][ T2557] ? __cfi_vhost_task_fn+0x10/0x10 [ 113.155179][ T2557] ? __kasan_check_write+0x18/0x20 [ 113.155201][ T2557] ? mutex_lock+0x97/0x1d0 [ 113.155231][ T2557] ? __cfi_mutex_lock+0x10/0x10 [ 113.155261][ T2557] ? kernel_text_address+0xa9/0xe0 [ 113.155298][ T2557] kvm_mmu_post_init_vm+0x161/0x300 [ 113.155332][ T2557] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 113.155363][ T2557] ? _parse_integer_limit+0x195/0x1e0 [ 113.155389][ T2557] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 113.155421][ T2557] ? kstrtoull+0x13b/0x1e0 [ 113.155443][ T2557] ? kstrtouint+0x78/0xf0 [ 113.155465][ T2557] ? ioctl_has_perm+0x1bc/0x500 [ 113.155487][ T2557] ? __asan_memcpy+0x5a/0x80 [ 113.155510][ T2557] ? ioctl_has_perm+0x408/0x500 [ 113.155536][ T2557] ? has_cap_mac_admin+0xd0/0xd0 [ 113.155562][ T2557] ? __kasan_check_write+0x18/0x20 [ 113.155592][ T2557] ? mutex_lock_killable+0x97/0x1d0 [ 113.155631][ T2557] ? __cfi_mutex_lock_killable+0x10/0x10 [ 113.155671][ T2557] ? proc_fail_nth_write+0x184/0x220 [ 113.155714][ T2557] kvm_vcpu_ioctl+0xa43/0x1000 [ 113.155745][ T2557] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 113.155775][ T2557] ? __cfi_vfs_write+0x10/0x10 [ 113.155812][ T2557] ? __kasan_check_write+0x18/0x20 [ 113.155841][ T2557] ? mutex_unlock+0x90/0x240 [ 113.155879][ T2557] ? __cfi_mutex_unlock+0x10/0x10 [ 113.155920][ T2557] ? bpf_lsm_file_ioctl+0xd/0x20 [ 113.155958][ T2557] ? security_file_ioctl+0x3e/0x110 [ 113.156001][ T2557] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 113.156031][ T2557] __se_sys_ioctl+0x132/0x1b0 [ 113.156066][ T2557] __x64_sys_ioctl+0x7f/0xa0 [ 113.156101][ T2557] x64_sys_call+0x1878/0x2ee0 [ 113.156129][ T2557] do_syscall_64+0x57/0xf0 [ 113.156176][ T2557] ? clear_bhb_loop+0x50/0xa0 [ 113.156217][ T2557] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.156255][ T2557] RIP: 0033:0x7fbb5db9e019 [ 113.156280][ T2557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.156306][ T2557] RSP: 002b:00007fbb5eaf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.156339][ T2557] RAX: ffffffffffffffda RBX: 00007fbb5de25fa0 RCX: 00007fbb5db9e019 [ 113.156361][ T2557] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 113.156383][ T2557] RBP: 00007fbb5eaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 113.156402][ T2557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.156424][ T2557] R13: 00007fbb5de26038 R14: 00007fbb5de25fa0 R15: 00007ffcbc0a3488 [ 113.156452][ T2557] [ 113.592983][ T2557] Mem-Info: [ 113.596140][ T2557] active_anon:7368 inactive_anon:5 isolated_anon:0 [ 113.596140][ T2557] active_file:12959 inactive_file:8858 isolated_file:0 [ 113.596140][ T2557] unevictable:0 dirty:481 writeback:0 [ 113.596140][ T2557] slab_reclaimable:5939 slab_unreclaimable:70761 [ 113.596140][ T2557] mapped:25198 shmem:165 pagetables:1181 [ 113.596140][ T2557] sec_pagetables:3 bounce:0 [ 113.596140][ T2557] kernel_misc_reclaimable:0 [ 113.596140][ T2557] free:1520978 free_pcp:2448 free_cma:0 [ 113.642026][ T2557] Node 0 active_anon:29472kB inactive_anon:20kB active_file:51836kB inactive_file:35432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100792kB dirty:1924kB writeback:0kB shmem:660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6136kB pagetables:4724kB sec_pagetables:12kB all_unreclaimable? no [ 113.674130][ T2557] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963408kB mlocked:0kB bounce:0kB free_pcp:5244kB local_pcp:68kB free_cma:0kB [ 113.704305][ T2557] lowmem_reserve[]: 0 3921 3921 [ 113.709208][ T2557] Normal free:3125748kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29472kB inactive_anon:20kB active_file:51836kB inactive_file:35432kB unevictable:0kB writepending:1924kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:5028kB local_pcp:3324kB free_cma:0kB [ 113.740714][ T2557] lowmem_reserve[]: 0 0 0 [ 113.745793][ T2557] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 113.761454][ T2557] Normal: 249*4kB (UME) 235*8kB (E) 485*16kB (UME) 712*32kB (UME) 510*64kB (UME) 68*128kB (UME) 17*256kB (ME) 12*512kB (ME) 9*1024kB (UM) 12*2048kB (UME) 734*4096kB (UME) = 3125516kB [ 113.779966][ T2557] 21983 total pagecache pages [ 113.784772][ T2557] 5 pages in swap cache [ 113.788986][ T2557] Free swap = 124716kB [ 113.795133][ T2557] Total swap = 124996kB [ 113.799745][ T2557] 2097051 pages RAM [ 113.803585][ T2557] 0 pages HighMem/MovableOnly [ 113.808446][ T2557] 352233 pages reserved [ 113.812628][ T2557] 0 pages cma reserved [ 113.819791][ T2557] Memory allocations: [ 113.823813][ T2557] 0 B 0 init/main.c:1477 func:do_initcalls [ 113.831468][ T2557] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 113.839718][ T2557] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 113.847618][ T2557] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 113.855554][ T2557] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 113.863523][ T2557] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 113.872182][ T2557] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 113.880167][ T2557] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 113.888358][ T2557] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 113.903328][ T2557] 0 B 0 init/initramfs.c:101 func:find_link [ 114.265509][ T2597] netlink: 12 bytes leftover after parsing attributes in process `syz.7.742'. [ 114.331407][ T1538] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 114.496337][ T1538] usb 2-1: no configurations [ 114.501098][ T1538] usb 2-1: can't read configurations, error -22 [ 114.660976][ T1538] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 114.755369][ T2608] kvm: pic: non byte write [ 114.826296][ T1538] usb 2-1: no configurations [ 114.831068][ T1538] usb 2-1: can't read configurations, error -22 [ 114.850832][ T1538] usb usb2-port1: attempt power cycle [ 115.021345][ T493] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 115.196062][ T493] usb 7-1: Using ep0 maxpacket: 16 [ 115.210515][ T493] usb 7-1: config 32 has an invalid interface number: 64 but max is 0 [ 115.226925][ T493] usb 7-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 115.226939][ T1538] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 115.257806][ T493] usb 7-1: config 32 has no interface number 0 [ 115.264744][ T1538] usb 2-1: no configurations [ 115.268152][ T493] usb 7-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 115.270261][ T1538] usb 2-1: can't read configurations, error -22 [ 115.284828][ T493] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.337611][ T2622] process 'syz.3.751' launched './file0' with NULL argv: empty string added [ 115.346820][ T36] audit: type=1400 audit(1785833733.438:370): avc: denied { execute_no_trans } for pid=2621 comm="syz.3.751" path="/206/file0" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.432595][ T1538] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 115.454223][ T1538] usb 2-1: no configurations [ 115.460944][ T1538] usb 2-1: can't read configurations, error -22 [ 115.468928][ T1538] usb usb2-port1: unable to enumerate USB device [ 116.377763][ T36] audit: type=1400 audit(1785833734.440:371): avc: denied { audit_read } for pid=2632 comm="syz.3.754" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.313485][ T2640] FAULT_INJECTION: forcing a failure. [ 117.313485][ T2640] name failslab, interval 1, probability 0, space 0, times 0 [ 117.341998][ T2640] CPU: 0 UID: 0 PID: 2640 Comm: syz.3.756 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 117.342038][ T2640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.342055][ T2640] Call Trace: [ 117.342064][ T2640] [ 117.342074][ T2640] __dump_stack+0x21/0x30 [ 117.342112][ T2640] dump_stack_lvl+0x140/0x1c0 [ 117.342145][ T2640] ? __cfi_dump_stack_lvl+0x10/0x10 [ 117.342178][ T2640] ? avc_has_perm+0x155/0x240 [ 117.342205][ T2640] ? __cfi_avc_has_perm+0x10/0x10 [ 117.342233][ T2640] dump_stack+0x19/0x20 [ 117.342265][ T2640] should_fail_ex+0x3c2/0x510 [ 117.342293][ T2640] should_failslab+0xac/0x100 [ 117.342323][ T2640] __kmalloc_cache_noprof+0x41/0x470 [ 117.342349][ T2640] ? vhost_task_create+0x12c/0x3f0 [ 117.342375][ T2640] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 117.342404][ T2640] vhost_task_create+0x12c/0x3f0 [ 117.342429][ T2640] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 117.342459][ T2640] ? __cfi_vhost_task_create+0x10/0x10 [ 117.342485][ T2640] ? __cfi_vhost_task_fn+0x10/0x10 [ 117.342510][ T2640] ? __kasan_check_write+0x18/0x20 [ 117.342534][ T2640] ? mutex_lock+0x97/0x1d0 [ 117.342566][ T2640] ? __cfi_mutex_lock+0x10/0x10 [ 117.342597][ T2640] ? kernel_text_address+0xa9/0xe0 [ 117.342630][ T2640] kvm_mmu_post_init_vm+0x161/0x300 [ 117.342664][ T2640] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 117.342697][ T2640] ? _parse_integer_limit+0x195/0x1e0 [ 117.342723][ T2640] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 117.342756][ T2640] ? kstrtoull+0x13b/0x1e0 [ 117.342779][ T2640] ? kstrtouint+0x78/0xf0 [ 117.342803][ T2640] ? ioctl_has_perm+0x1bc/0x500 [ 117.342825][ T2640] ? __asan_memcpy+0x5a/0x80 [ 117.342849][ T2640] ? ioctl_has_perm+0x408/0x500 [ 117.342871][ T2640] ? has_cap_mac_admin+0xd0/0xd0 [ 117.342894][ T2640] ? __kasan_check_write+0x18/0x20 [ 117.342917][ T2640] ? mutex_lock_killable+0x97/0x1d0 [ 117.342958][ T2640] ? __cfi_mutex_lock_killable+0x10/0x10 [ 117.342992][ T2640] ? proc_fail_nth_write+0x184/0x220 [ 117.343028][ T2640] kvm_vcpu_ioctl+0xa43/0x1000 [ 117.343055][ T2640] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 117.343079][ T2640] ? __cfi_vfs_write+0x10/0x10 [ 117.343104][ T2640] ? __kasan_check_write+0x18/0x20 [ 117.343127][ T2640] ? mutex_unlock+0x90/0x240 [ 117.343160][ T2640] ? __cfi_mutex_unlock+0x10/0x10 [ 117.343196][ T2640] ? bpf_lsm_file_ioctl+0xd/0x20 [ 117.343226][ T2640] ? security_file_ioctl+0x3e/0x110 [ 117.343262][ T2640] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 117.343285][ T2640] __se_sys_ioctl+0x132/0x1b0 [ 117.343314][ T2640] __x64_sys_ioctl+0x7f/0xa0 [ 117.343342][ T2640] x64_sys_call+0x1878/0x2ee0 [ 117.343363][ T2640] do_syscall_64+0x57/0xf0 [ 117.343388][ T2640] ? clear_bhb_loop+0x50/0xa0 [ 117.343420][ T2640] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.343450][ T2640] RIP: 0033:0x7fd6ec39e019 [ 117.343471][ T2640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.343491][ T2640] RSP: 002b:00007fd6ed217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.343517][ T2640] RAX: ffffffffffffffda RBX: 00007fd6ec625fa0 RCX: 00007fd6ec39e019 [ 117.343535][ T2640] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 117.343550][ T2640] RBP: 00007fd6ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 117.343565][ T2640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.343581][ T2640] R13: 00007fd6ec626038 R14: 00007fd6ec625fa0 R15: 00007ffe6dc08308 [ 117.343602][ T2640] [ 117.800957][ T1538] usb 7-1: USB disconnect, device number 2 [ 117.921537][ T2651] raw_sendmsg: syz.6.760 forgot to set AF_INET. Fix it! [ 118.102025][ T2662] FAULT_INJECTION: forcing a failure. [ 118.102025][ T2662] name failslab, interval 1, probability 0, space 0, times 0 [ 118.130727][ T2662] CPU: 0 UID: 0 PID: 2662 Comm: syz.3.765 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 118.130769][ T2662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.130785][ T2662] Call Trace: [ 118.130794][ T2662] [ 118.130804][ T2662] __dump_stack+0x21/0x30 [ 118.130845][ T2662] dump_stack_lvl+0x140/0x1c0 [ 118.130885][ T2662] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.130920][ T2662] ? avc_has_perm+0x155/0x240 [ 118.130949][ T2662] ? __cfi_avc_has_perm+0x10/0x10 [ 118.130979][ T2662] dump_stack+0x19/0x20 [ 118.131012][ T2662] should_fail_ex+0x3c2/0x510 [ 118.131040][ T2662] should_failslab+0xac/0x100 [ 118.131070][ T2662] __kmalloc_cache_noprof+0x41/0x470 [ 118.131097][ T2662] ? vhost_task_create+0x12c/0x3f0 [ 118.131126][ T2662] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 118.131156][ T2662] vhost_task_create+0x12c/0x3f0 [ 118.131187][ T2662] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 118.131210][ T2662] ? __cfi_vhost_task_create+0x10/0x10 [ 118.131231][ T2662] ? __cfi_vhost_task_fn+0x10/0x10 [ 118.131249][ T2662] ? __kasan_check_write+0x18/0x20 [ 118.131268][ T2662] ? mutex_lock+0x97/0x1d0 [ 118.131292][ T2662] ? __cfi_mutex_lock+0x10/0x10 [ 118.131316][ T2662] ? kernel_text_address+0xa9/0xe0 [ 118.131342][ T2662] kvm_mmu_post_init_vm+0x161/0x300 [ 118.131376][ T2662] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 118.131402][ T2662] ? _parse_integer_limit+0x195/0x1e0 [ 118.131422][ T2662] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 118.131447][ T2662] ? kstrtoull+0x13b/0x1e0 [ 118.131464][ T2662] ? kstrtouint+0x78/0xf0 [ 118.131482][ T2662] ? ioctl_has_perm+0x1bc/0x500 [ 118.131500][ T2662] ? __asan_memcpy+0x5a/0x80 [ 118.131518][ T2662] ? ioctl_has_perm+0x408/0x500 [ 118.131535][ T2662] ? has_cap_mac_admin+0xd0/0xd0 [ 118.131552][ T2662] ? __kasan_check_write+0x18/0x20 [ 118.131570][ T2662] ? mutex_lock_killable+0x97/0x1d0 [ 118.131595][ T2662] ? __cfi_mutex_lock_killable+0x10/0x10 [ 118.131621][ T2662] ? proc_fail_nth_write+0x184/0x220 [ 118.131649][ T2662] kvm_vcpu_ioctl+0xa43/0x1000 [ 118.131667][ T2662] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 118.131685][ T2662] ? __cfi_vfs_write+0x10/0x10 [ 118.131704][ T2662] ? __kasan_check_write+0x18/0x20 [ 118.131721][ T2662] ? mutex_unlock+0x90/0x240 [ 118.131745][ T2662] ? __cfi_mutex_unlock+0x10/0x10 [ 118.131773][ T2662] ? bpf_lsm_file_ioctl+0xd/0x20 [ 118.131796][ T2662] ? security_file_ioctl+0x3e/0x110 [ 118.131823][ T2662] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 118.131840][ T2662] __se_sys_ioctl+0x132/0x1b0 [ 118.131863][ T2662] __x64_sys_ioctl+0x7f/0xa0 [ 118.131888][ T2662] x64_sys_call+0x1878/0x2ee0 [ 118.131911][ T2662] do_syscall_64+0x57/0xf0 [ 118.131931][ T2662] ? clear_bhb_loop+0x50/0xa0 [ 118.131956][ T2662] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.131980][ T2662] RIP: 0033:0x7fd6ec39e019 [ 118.131997][ T2662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.132013][ T2662] RSP: 002b:00007fd6ed217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.132033][ T2662] RAX: ffffffffffffffda RBX: 00007fd6ec625fa0 RCX: 00007fd6ec39e019 [ 118.132048][ T2662] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 118.132060][ T2662] RBP: 00007fd6ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 118.132072][ T2662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.132083][ T2662] R13: 00007fd6ec626038 R14: 00007fd6ec625fa0 R15: 00007ffe6dc08308 [ 118.132099][ T2662] [ 118.824057][ T2687] FAULT_INJECTION: forcing a failure. [ 118.824057][ T2687] name failslab, interval 1, probability 0, space 0, times 0 [ 118.837012][ T2687] CPU: 0 UID: 0 PID: 2687 Comm: syz.3.773 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 118.837043][ T2687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.837055][ T2687] Call Trace: [ 118.837062][ T2687] [ 118.837070][ T2687] __dump_stack+0x21/0x30 [ 118.837101][ T2687] dump_stack_lvl+0x140/0x1c0 [ 118.837128][ T2687] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.837157][ T2687] dump_stack+0x19/0x20 [ 118.837182][ T2687] should_fail_ex+0x3c2/0x510 [ 118.837205][ T2687] should_failslab+0xac/0x100 [ 118.837230][ T2687] kmem_cache_alloc_node_noprof+0x45/0x420 [ 118.837251][ T2687] ? dup_task_struct+0xc1/0xd80 [ 118.837276][ T2687] ? kasan_save_alloc_info+0x3a/0x50 [ 118.837305][ T2687] ? __kasan_kmalloc+0x96/0xb0 [ 118.837327][ T2687] ? __kmalloc_cache_noprof+0x23c/0x470 [ 118.837348][ T2687] dup_task_struct+0xc1/0xd80 [ 118.837371][ T2687] ? __kasan_check_write+0x18/0x20 [ 118.837398][ T2687] ? _raw_spin_lock_irq+0x93/0x120 [ 118.837421][ T2687] ? copy_process+0x3350/0x3350 [ 118.837444][ T2687] ? __kasan_check_write+0x18/0x20 [ 118.837464][ T2687] copy_process+0x57c/0x3350 [ 118.837490][ T2687] ? kasan_save_alloc_info+0x3a/0x50 [ 118.837519][ T2687] ? __cfi_copy_process+0x10/0x10 [ 118.837543][ T2687] ? __kmalloc_cache_noprof+0x23c/0x470 [ 118.837565][ T2687] ? __kasan_check_write+0x18/0x20 [ 118.837583][ T2687] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 118.837606][ T2687] vhost_task_create+0x1f7/0x3f0 [ 118.837627][ T2687] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 118.837650][ T2687] ? __cfi_vhost_task_create+0x10/0x10 [ 118.837672][ T2687] ? __cfi_vhost_task_fn+0x10/0x10 [ 118.837692][ T2687] ? __kasan_check_write+0x18/0x20 [ 118.837711][ T2687] ? mutex_lock+0x97/0x1d0 [ 118.837736][ T2687] ? __cfi_mutex_lock+0x10/0x10 [ 118.837762][ T2687] ? kernel_text_address+0xa9/0xe0 [ 118.837789][ T2687] kvm_mmu_post_init_vm+0x161/0x300 [ 118.837817][ T2687] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 118.837843][ T2687] ? _parse_integer_limit+0x195/0x1e0 [ 118.837873][ T2687] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 118.837908][ T2687] ? kstrtoull+0x13b/0x1e0 [ 118.837935][ T2687] ? kstrtouint+0x78/0xf0 [ 118.837955][ T2687] ? ioctl_has_perm+0x1bc/0x500 [ 118.837974][ T2687] ? __asan_memcpy+0x5a/0x80 [ 118.837993][ T2687] ? ioctl_has_perm+0x408/0x500 [ 118.838012][ T2687] ? has_cap_mac_admin+0xd0/0xd0 [ 118.838030][ T2687] ? __kasan_check_write+0x18/0x20 [ 118.838048][ T2687] ? mutex_lock_killable+0x97/0x1d0 [ 118.838076][ T2687] ? __cfi_mutex_lock_killable+0x10/0x10 [ 118.838102][ T2687] ? proc_fail_nth_write+0x184/0x220 [ 118.838132][ T2687] kvm_vcpu_ioctl+0xa43/0x1000 [ 118.838152][ T2687] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 118.838171][ T2687] ? __cfi_vfs_write+0x10/0x10 [ 118.838191][ T2687] ? __kasan_check_write+0x18/0x20 [ 118.838209][ T2687] ? mutex_unlock+0x90/0x240 [ 118.838235][ T2687] ? __cfi_mutex_unlock+0x10/0x10 [ 118.838264][ T2687] ? bpf_lsm_file_ioctl+0xd/0x20 [ 118.838288][ T2687] ? security_file_ioctl+0x3e/0x110 [ 118.838317][ T2687] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 118.838335][ T2687] __se_sys_ioctl+0x132/0x1b0 [ 118.838359][ T2687] __x64_sys_ioctl+0x7f/0xa0 [ 118.838402][ T2687] x64_sys_call+0x1878/0x2ee0 [ 118.838420][ T2687] do_syscall_64+0x57/0xf0 [ 118.838442][ T2687] ? clear_bhb_loop+0x50/0xa0 [ 118.838468][ T2687] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.838493][ T2687] RIP: 0033:0x7fd6ec39e019 [ 118.838510][ T2687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.838527][ T2687] RSP: 002b:00007fd6ed217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.838548][ T2687] RAX: ffffffffffffffda RBX: 00007fd6ec625fa0 RCX: 00007fd6ec39e019 [ 118.838563][ T2687] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 118.838576][ T2687] RBP: 00007fd6ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 118.838589][ T2687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.838601][ T2687] R13: 00007fd6ec626038 R14: 00007fd6ec625fa0 R15: 00007ffe6dc08308 [ 118.838618][ T2687] [ 118.842296][ T2688] syz.7.772(2688): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 119.194612][ T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 119.202740][ T1538] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 119.312128][ T36] audit: type=1400 audit(1785833737.311:372): avc: denied { create } for pid=2689 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 119.328107][ T2690] kvm: pic: non byte write [ 119.355706][ T2693] 9pnet_fd: p9_fd_create_tcp (2693): problem connecting socket to 127.0.0.1 [ 119.365637][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.376041][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.380709][ T2693] random: crng reseeded on system resumption [ 119.385021][ T36] audit: type=1400 audit(1785833737.379:373): avc: denied { write } for pid=2692 comm="syz.6.775" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 119.399093][ T1538] usb 2-1: device descriptor read/64, error -71 [ 119.415776][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.429331][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.437405][ T9] usb 8-1: Product: syz [ 119.441703][ T9] usb 8-1: Manufacturer: syz [ 119.446592][ T9] usb 8-1: SerialNumber: syz [ 119.451286][ T36] audit: type=1400 audit(1785833737.438:374): avc: denied { watch } for pid=2692 comm="syz.6.775" path="/10" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.473546][ T36] audit: type=1400 audit(1785833737.448:375): avc: denied { create } for pid=2692 comm="syz.6.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 119.664527][ T1538] usb 2-1: device descriptor read/64, error -71 [ 119.700504][ T9] usb 8-1: 0:2 : does not exist [ 119.705541][ T9] usb 8-1: unit 9 not found! [ 119.712107][ T9] usb 8-1: 4:0: cannot get min/max values for control 1 (id 4) [ 119.721735][ T9] usb 8-1: 4:0: cannot get min/max values for control 2 (id 4) [ 119.731286][ T9] usb 8-1: 4:0: cannot get min/max values for control 4 (id 4) [ 119.741066][ T9] usb 8-1: 4:0: cannot get min/max values for control 7 (id 4) [ 119.750553][ T9] usb 8-1: 4:0: cannot get min/max values for control 8 (id 4) [ 119.760115][ T9] usb 8-1: 4:0: cannot get min/max values for control 9 (id 4) [ 119.766780][ T311] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 119.771265][ T9] usb 8-1: 4:0: cannot get min/max values for control 10 (id 4) [ 119.785163][ T9] usb 8-1: USB disconnect, device number 2 [ 119.795131][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.909739][ T1538] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 119.919990][ T311] usb 7-1: Using ep0 maxpacket: 8 [ 119.926093][ T311] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.934458][ T311] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 119.944813][ T311] usb 7-1: config 179 has no interface number 0 [ 119.951120][ T311] usb 7-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.964461][ T311] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.973631][ T311] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.042524][ T1538] usb 2-1: device descriptor read/64, error -71 [ 120.189371][ T36] audit: type=1400 audit(1785833738.172:376): avc: denied { read } for pid=2695 comm="syz.6.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.215395][ T2696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.268269][ T9] usb 7-1: USB disconnect, device number 3 [ 120.287983][ T1538] usb 2-1: device descriptor read/64, error -71 [ 120.399737][ T1538] usb usb2-port1: attempt power cycle [ 120.746530][ T1538] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 120.767935][ T1538] usb 2-1: device descriptor read/8, error -71 [ 120.901020][ T1538] usb 2-1: device descriptor read/8, error -71 [ 120.901992][ T2713] FAULT_INJECTION: forcing a failure. [ 120.901992][ T2713] name failslab, interval 1, probability 0, space 0, times 0 [ 120.919968][ T2713] CPU: 0 UID: 0 PID: 2713 Comm: syz.6.783 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 120.920002][ T2713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.920017][ T2713] Call Trace: [ 120.920025][ T2713] [ 120.920035][ T2713] __dump_stack+0x21/0x30 [ 120.920070][ T2713] dump_stack_lvl+0x140/0x1c0 [ 120.920093][ T2713] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.920117][ T2713] dump_stack+0x19/0x20 [ 120.920139][ T2713] should_fail_ex+0x3c2/0x510 [ 120.920162][ T2713] should_failslab+0xac/0x100 [ 120.920182][ T2713] kmem_cache_alloc_node_noprof+0x45/0x420 [ 120.920204][ T2713] ? dup_task_struct+0xc1/0xd80 [ 120.920225][ T2713] ? kasan_save_alloc_info+0x3a/0x50 [ 120.920249][ T2713] ? __kasan_kmalloc+0x96/0xb0 [ 120.920268][ T2713] ? __kmalloc_cache_noprof+0x23c/0x470 [ 120.920286][ T2713] dup_task_struct+0xc1/0xd80 [ 120.920305][ T2713] ? __kasan_check_write+0x18/0x20 [ 120.920321][ T2713] ? _raw_spin_lock_irq+0x93/0x120 [ 120.920341][ T2713] ? copy_process+0x3350/0x3350 [ 120.920360][ T2713] ? __kasan_check_write+0x18/0x20 [ 120.920377][ T2713] copy_process+0x57c/0x3350 [ 120.920399][ T2713] ? kasan_save_alloc_info+0x3a/0x50 [ 120.920423][ T2713] ? __cfi_copy_process+0x10/0x10 [ 120.920443][ T2713] ? __kmalloc_cache_noprof+0x23c/0x470 [ 120.920460][ T2713] ? __kasan_check_write+0x18/0x20 [ 120.920476][ T2713] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 120.920496][ T2713] vhost_task_create+0x1f7/0x3f0 [ 120.920513][ T2713] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 120.920533][ T2713] ? __cfi_vhost_task_create+0x10/0x10 [ 120.920551][ T2713] ? __cfi_vhost_task_fn+0x10/0x10 [ 120.920568][ T2713] ? __kasan_check_write+0x18/0x20 [ 120.920584][ T2713] ? mutex_lock+0x97/0x1d0 [ 120.920605][ T2713] ? __cfi_mutex_lock+0x10/0x10 [ 120.920626][ T2713] ? kernel_text_address+0xa9/0xe0 [ 120.920650][ T2713] kvm_mmu_post_init_vm+0x161/0x300 [ 120.920674][ T2713] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 120.920697][ T2713] ? _parse_integer_limit+0x195/0x1e0 [ 120.920717][ T2713] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 120.920739][ T2713] ? kstrtoull+0x13b/0x1e0 [ 120.920754][ T2713] ? kstrtouint+0x78/0xf0 [ 120.920770][ T2713] ? ioctl_has_perm+0x1bc/0x500 [ 120.920786][ T2713] ? __asan_memcpy+0x5a/0x80 [ 120.920801][ T2713] ? ioctl_has_perm+0x408/0x500 [ 120.920816][ T2713] ? has_cap_mac_admin+0xd0/0xd0 [ 120.920832][ T2713] ? __kasan_check_write+0x18/0x20 [ 120.920847][ T2713] ? mutex_lock_killable+0x97/0x1d0 [ 120.920869][ T2713] ? __cfi_mutex_lock_killable+0x10/0x10 [ 120.920892][ T2713] ? proc_fail_nth_write+0x184/0x220 [ 120.920916][ T2713] kvm_vcpu_ioctl+0xa43/0x1000 [ 120.920933][ T2713] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 120.920948][ T2713] ? __cfi_vfs_write+0x10/0x10 [ 120.920964][ T2713] ? __kasan_check_write+0x18/0x20 [ 120.920980][ T2713] ? mutex_unlock+0x90/0x240 [ 120.921005][ T2713] ? __cfi_mutex_unlock+0x10/0x10 [ 120.921029][ T2713] ? bpf_lsm_file_ioctl+0xd/0x20 [ 120.921075][ T2713] ? security_file_ioctl+0x3e/0x110 [ 120.921116][ T2713] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 120.921133][ T2713] __se_sys_ioctl+0x132/0x1b0 [ 120.921154][ T2713] __x64_sys_ioctl+0x7f/0xa0 [ 120.921173][ T2713] x64_sys_call+0x1878/0x2ee0 [ 120.921187][ T2713] do_syscall_64+0x57/0xf0 [ 120.921210][ T2713] ? clear_bhb_loop+0x50/0xa0 [ 120.921232][ T2713] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.921253][ T2713] RIP: 0033:0x7fdc8039e019 [ 120.921268][ T2713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.921282][ T2713] RSP: 002b:00007fdc7edf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.921299][ T2713] RAX: ffffffffffffffda RBX: 00007fdc80625fa0 RCX: 00007fdc8039e019 [ 120.921313][ T2713] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 120.921323][ T2713] RBP: 00007fdc7edf7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.921334][ T2713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.921345][ T2713] R13: 00007fdc80626038 R14: 00007fdc80625fa0 R15: 00007ffc0caf4778 [ 120.921372][ T2713] [ 121.297300][ T1538] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 121.360489][ T1538] usb 2-1: device descriptor read/8, error -71 [ 121.494146][ T1538] usb 2-1: device descriptor read/8, error -71 [ 121.505534][ T2727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59 sclass=netlink_tcpdiag_socket pid=2727 comm=syz.3.789 [ 121.518173][ T2727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=2727 comm=syz.3.789 [ 121.530810][ T2727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=61 sclass=netlink_tcpdiag_socket pid=2727 comm=syz.3.789 [ 121.543413][ T2727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57 sclass=netlink_tcpdiag_socket pid=2727 comm=syz.3.789 [ 121.557155][ T2727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=55 sclass=netlink_tcpdiag_socket pid=2727 comm=syz.3.789 [ 121.569805][ T2727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=2727 comm=syz.3.789 [ 121.602866][ T493] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 121.613158][ T1538] usb usb2-port1: unable to enumerate USB device [ 121.622310][ T2732] FAULT_INJECTION: forcing a failure. [ 121.622310][ T2732] name failslab, interval 1, probability 0, space 0, times 0 [ 121.635460][ T2732] CPU: 0 UID: 0 PID: 2732 Comm: syz.7.790 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 121.635493][ T2732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.635506][ T2732] Call Trace: [ 121.635513][ T2732] [ 121.635522][ T2732] __dump_stack+0x21/0x30 [ 121.635555][ T2732] dump_stack_lvl+0x140/0x1c0 [ 121.635582][ T2732] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.635612][ T2732] dump_stack+0x19/0x20 [ 121.635638][ T2732] should_fail_ex+0x3c2/0x510 [ 121.635664][ T2732] should_failslab+0xac/0x100 [ 121.635689][ T2732] __kmalloc_cache_node_noprof+0x46/0x430 [ 121.635712][ T2732] ? __get_vm_area_node+0x150/0x390 [ 121.635740][ T2732] ? kasan_save_alloc_info+0x3a/0x50 [ 121.635771][ T2732] ? __kasan_slab_alloc+0x73/0x90 [ 121.635794][ T2732] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 121.635817][ T2732] __get_vm_area_node+0x150/0x390 [ 121.635845][ T2732] __vmalloc_node_range_noprof+0x340/0x1300 [ 121.635875][ T2732] ? copy_process+0x57c/0x3350 [ 121.635905][ T2732] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 121.635936][ T2732] ? kasan_save_alloc_info+0x3a/0x50 [ 121.635966][ T2732] ? __kasan_slab_alloc+0x73/0x90 [ 121.635990][ T2732] ? arch_dup_task_struct+0x5b/0xe0 [ 121.636020][ T2732] ? __asan_memcpy+0x5a/0x80 [ 121.636040][ T2732] dup_task_struct+0x5d6/0xd80 [ 121.636065][ T2732] ? copy_process+0x57c/0x3350 [ 121.636089][ T2732] ? _raw_spin_lock_irq+0x93/0x120 [ 121.636112][ T2732] ? copy_process+0x3350/0x3350 [ 121.636146][ T2732] ? __kasan_check_write+0x18/0x20 [ 121.636167][ T2732] copy_process+0x57c/0x3350 [ 121.636194][ T2732] ? kasan_save_alloc_info+0x3a/0x50 [ 121.636224][ T2732] ? __cfi_copy_process+0x10/0x10 [ 121.636249][ T2732] ? __kmalloc_cache_noprof+0x23c/0x470 [ 121.636271][ T2732] ? __kasan_check_write+0x18/0x20 [ 121.636291][ T2732] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 121.636316][ T2732] vhost_task_create+0x1f7/0x3f0 [ 121.636338][ T2732] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 121.636363][ T2732] ? __cfi_vhost_task_create+0x10/0x10 [ 121.636386][ T2732] ? __cfi_vhost_task_fn+0x10/0x10 [ 121.636406][ T2732] ? __kasan_check_write+0x18/0x20 [ 121.636426][ T2732] ? mutex_lock+0x97/0x1d0 [ 121.636453][ T2732] ? __cfi_mutex_lock+0x10/0x10 [ 121.636479][ T2732] ? kernel_text_address+0xa9/0xe0 [ 121.636507][ T2732] kvm_mmu_post_init_vm+0x161/0x300 [ 121.636537][ T2732] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 121.636564][ T2732] ? _parse_integer_limit+0x195/0x1e0 [ 121.636587][ T2732] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 121.636614][ T2732] ? kstrtoull+0x13b/0x1e0 [ 121.636634][ T2732] ? kstrtouint+0x78/0xf0 [ 121.636655][ T2732] ? ioctl_has_perm+0x1bc/0x500 [ 121.636675][ T2732] ? __asan_memcpy+0x5a/0x80 [ 121.636695][ T2732] ? ioctl_has_perm+0x408/0x500 [ 121.636714][ T2732] ? has_cap_mac_admin+0xd0/0xd0 [ 121.636734][ T2732] ? __kasan_check_write+0x18/0x20 [ 121.636754][ T2732] ? mutex_lock_killable+0x97/0x1d0 [ 121.636782][ T2732] ? __cfi_mutex_lock_killable+0x10/0x10 [ 121.636811][ T2732] ? proc_fail_nth_write+0x184/0x220 [ 121.636842][ T2732] kvm_vcpu_ioctl+0xa43/0x1000 [ 121.636862][ T2732] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 121.636882][ T2732] ? __cfi_vfs_write+0x10/0x10 [ 121.636915][ T2732] ? __kasan_check_write+0x18/0x20 [ 121.636934][ T2732] ? mutex_unlock+0x90/0x240 [ 121.636960][ T2732] ? __cfi_mutex_unlock+0x10/0x10 [ 121.636989][ T2732] ? bpf_lsm_file_ioctl+0xd/0x20 [ 121.637015][ T2732] ? security_file_ioctl+0x3e/0x110 [ 121.637044][ T2732] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 121.637063][ T2732] __se_sys_ioctl+0x132/0x1b0 [ 121.637086][ T2732] __x64_sys_ioctl+0x7f/0xa0 [ 121.637110][ T2732] x64_sys_call+0x1878/0x2ee0 [ 121.637128][ T2732] do_syscall_64+0x57/0xf0 [ 121.637156][ T2732] ? clear_bhb_loop+0x50/0xa0 [ 121.637182][ T2732] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.637207][ T2732] RIP: 0033:0x7fc44d99e019 [ 121.637225][ T2732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.637241][ T2732] RSP: 002b:00007fc44e787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.637262][ T2732] RAX: ffffffffffffffda RBX: 00007fc44dc25fa0 RCX: 00007fc44d99e019 [ 121.637277][ T2732] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 121.637290][ T2732] RBP: 00007fc44e787090 R08: 0000000000000000 R09: 0000000000000000 [ 121.637302][ T2732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.637315][ T2732] R13: 00007fc44dc26038 R14: 00007fc44dc25fa0 R15: 00007ffde308cd58 [ 121.637332][ T2732] [ 122.138336][ T2744] can: request_module (can-proto-0) failed. [ 122.153026][ T36] audit: type=1400 audit(1785833740.095:377): avc: denied { bind } for pid=2743 comm="syz.7.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.173710][ T493] usb 7-1: unable to get BOS descriptor or descriptor too short [ 122.181818][ T493] usb 7-1: not running at top speed; connect to a high speed hub [ 122.190342][ T493] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 122.201066][ T36] audit: type=1400 audit(1785833740.104:378): avc: denied { name_bind } for pid=2743 comm="syz.7.794" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 122.216787][ T493] usb 7-1: language id specifier not provided by device, defaulting to English [ 122.231216][ T36] audit: type=1400 audit(1785833740.104:379): avc: denied { node_bind } for pid=2743 comm="syz.7.794" saddr=::a8aa:aaff:feaa:aa1e src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 122.263067][ T493] usb 7-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 122.272252][ T493] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.280325][ T493] usb 7-1: Product: syz [ 122.284548][ T493] usb 7-1: Manufacturer: 鴪ꋾ犪䍌甩㪖Ᶎ䑕炗ꃗ㯑ꚕ䄝隇텝⽺䰸㰚힇阚电둰₶헒ⷡ셌孾種⺗⟗轈헴ꄦ큠㷽ꮓኍ㞪噞ഐ㏯쨀行袡ᒏ檧鐞澁ﮱ쏑݇䱮괙ᮋ汖ႋँ錎㜇䊠⑱ຐꨣ衟ꁭ悝粈赤㶯춎敧 [ 122.309076][ T493] usb 7-1: SerialNumber: syz [ 122.575050][ T493] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 122.590895][ T493] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 122.610944][ T493] usb 7-1: USB disconnect, device number 4 [ 123.105546][ T2764] syzkaller1: entered promiscuous mode [ 123.111185][ T2764] syzkaller1: entered allmulticast mode [ 123.118876][ T36] audit: type=1400 audit(1785833741.038:380): avc: denied { map } for pid=2763 comm="syz.7.801" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.146302][ T2766] FAULT_INJECTION: forcing a failure. [ 123.146302][ T2766] name failslab, interval 1, probability 0, space 0, times 0 [ 123.159059][ T2766] CPU: 1 UID: 0 PID: 2766 Comm: syz.6.802 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 123.159095][ T2766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.159111][ T2766] Call Trace: [ 123.159120][ T2766] [ 123.159131][ T2766] __dump_stack+0x21/0x30 [ 123.159168][ T2766] dump_stack_lvl+0x140/0x1c0 [ 123.159201][ T2766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.159237][ T2766] dump_stack+0x19/0x20 [ 123.159268][ T2766] should_fail_ex+0x3c2/0x510 [ 123.159295][ T2766] should_failslab+0xac/0x100 [ 123.159325][ T2766] __kmalloc_cache_node_noprof+0x46/0x430 [ 123.159353][ T2766] ? __get_vm_area_node+0x150/0x390 [ 123.159386][ T2766] ? kasan_save_alloc_info+0x3a/0x50 [ 123.159422][ T2766] ? __kasan_slab_alloc+0x73/0x90 [ 123.159451][ T2766] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 123.159478][ T2766] __get_vm_area_node+0x150/0x390 [ 123.159513][ T2766] __vmalloc_node_range_noprof+0x340/0x1300 [ 123.159550][ T2766] ? copy_process+0x57c/0x3350 [ 123.159585][ T2766] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 123.159621][ T2766] ? kasan_save_alloc_info+0x3a/0x50 [ 123.159664][ T2766] ? __kasan_slab_alloc+0x73/0x90 [ 123.159693][ T2766] ? arch_dup_task_struct+0x5b/0xe0 [ 123.159729][ T2766] ? __asan_memcpy+0x5a/0x80 [ 123.159753][ T2766] dup_task_struct+0x5d6/0xd80 [ 123.159782][ T2766] ? copy_process+0x57c/0x3350 [ 123.159811][ T2766] ? _raw_spin_lock_irq+0x93/0x120 [ 123.159838][ T2766] ? copy_process+0x3350/0x3350 [ 123.159867][ T2766] ? __kasan_check_write+0x18/0x20 [ 123.159891][ T2766] copy_process+0x57c/0x3350 [ 123.159924][ T2766] ? kasan_save_alloc_info+0x3a/0x50 [ 123.159959][ T2766] ? __cfi_copy_process+0x10/0x10 [ 123.159988][ T2766] ? __kmalloc_cache_noprof+0x23c/0x470 [ 123.160014][ T2766] ? __kasan_check_write+0x18/0x20 [ 123.160038][ T2766] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 123.160076][ T2766] vhost_task_create+0x1f7/0x3f0 [ 123.160101][ T2766] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 123.160131][ T2766] ? __cfi_vhost_task_create+0x10/0x10 [ 123.160163][ T2766] ? __cfi_vhost_task_fn+0x10/0x10 [ 123.160188][ T2766] ? __kasan_check_write+0x18/0x20 [ 123.160211][ T2766] ? mutex_lock+0x97/0x1d0 [ 123.160243][ T2766] ? __cfi_mutex_lock+0x10/0x10 [ 123.160274][ T2766] ? kernel_text_address+0xa9/0xe0 [ 123.160308][ T2766] kvm_mmu_post_init_vm+0x161/0x300 [ 123.160342][ T2766] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 123.160374][ T2766] ? _parse_integer_limit+0x195/0x1e0 [ 123.160400][ T2766] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 123.160433][ T2766] ? kstrtoull+0x13b/0x1e0 [ 123.160460][ T2766] ? kstrtouint+0x78/0xf0 [ 123.160483][ T2766] ? ioctl_has_perm+0x1bc/0x500 [ 123.160506][ T2766] ? __asan_memcpy+0x5a/0x80 [ 123.160527][ T2766] ? ioctl_has_perm+0x408/0x500 [ 123.160550][ T2766] ? has_cap_mac_admin+0xd0/0xd0 [ 123.160572][ T2766] ? __kasan_check_write+0x18/0x20 [ 123.160596][ T2766] ? mutex_lock_killable+0x97/0x1d0 [ 123.160629][ T2766] ? __cfi_mutex_lock_killable+0x10/0x10 [ 123.160669][ T2766] ? proc_fail_nth_write+0x184/0x220 [ 123.160705][ T2766] kvm_vcpu_ioctl+0xa43/0x1000 [ 123.160730][ T2766] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 123.160753][ T2766] ? __cfi_vfs_write+0x10/0x10 [ 123.160778][ T2766] ? __kasan_check_write+0x18/0x20 [ 123.160801][ T2766] ? mutex_unlock+0x90/0x240 [ 123.160833][ T2766] ? __cfi_mutex_unlock+0x10/0x10 [ 123.160869][ T2766] ? bpf_lsm_file_ioctl+0xd/0x20 [ 123.160899][ T2766] ? security_file_ioctl+0x3e/0x110 [ 123.160936][ T2766] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 123.160958][ T2766] __se_sys_ioctl+0x132/0x1b0 [ 123.160988][ T2766] __x64_sys_ioctl+0x7f/0xa0 [ 123.161016][ T2766] x64_sys_call+0x1878/0x2ee0 [ 123.161038][ T2766] do_syscall_64+0x57/0xf0 [ 123.161064][ T2766] ? clear_bhb_loop+0x50/0xa0 [ 123.161096][ T2766] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.161128][ T2766] RIP: 0033:0x7fdc8039e019 [ 123.161147][ T2766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.161169][ T2766] RSP: 002b:00007fdc7edf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.161194][ T2766] RAX: ffffffffffffffda RBX: 00007fdc80625fa0 RCX: 00007fdc8039e019 [ 123.161214][ T2766] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 123.161229][ T2766] RBP: 00007fdc7edf7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.161246][ T2766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.161261][ T2766] R13: 00007fdc80626038 R14: 00007fdc80625fa0 R15: 00007ffc0caf4778 [ 123.161282][ T2766] [ 123.606923][ T2766] warn_alloc: 1 callbacks suppressed [ 123.606975][ T2766] syz.6.802: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 123.632164][ T2766] CPU: 0 UID: 0 PID: 2766 Comm: syz.6.802 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 123.632190][ T2766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.632201][ T2766] Call Trace: [ 123.632206][ T2766] [ 123.632213][ T2766] __dump_stack+0x21/0x30 [ 123.632240][ T2766] dump_stack_lvl+0x140/0x1c0 [ 123.632263][ T2766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.632286][ T2766] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 123.632320][ T2766] dump_stack+0x19/0x20 [ 123.632341][ T2766] warn_alloc+0x1e7/0x2c0 [ 123.632363][ T2766] ? __kasan_kmalloc+0x28/0xb0 [ 123.632383][ T2766] ? __cfi_warn_alloc+0x10/0x10 [ 123.632404][ T2766] ? __get_vm_area_node+0x150/0x390 [ 123.632427][ T2766] ? kasan_save_alloc_info+0x3a/0x50 [ 123.632451][ T2766] ? __get_vm_area_node+0x382/0x390 [ 123.632475][ T2766] __vmalloc_node_range_noprof+0x365/0x1300 [ 123.632561][ T2766] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 123.632593][ T2766] ? kasan_save_alloc_info+0x3a/0x50 [ 123.632626][ T2766] ? __kasan_slab_alloc+0x73/0x90 [ 123.632651][ T2766] ? arch_dup_task_struct+0x5b/0xe0 [ 123.632685][ T2766] ? __asan_memcpy+0x5a/0x80 [ 123.632713][ T2766] dup_task_struct+0x5d6/0xd80 [ 123.632741][ T2766] ? copy_process+0x57c/0x3350 [ 123.632771][ T2766] ? _raw_spin_lock_irq+0x93/0x120 [ 123.632789][ T2766] ? copy_process+0x3350/0x3350 [ 123.632810][ T2766] ? __kasan_check_write+0x18/0x20 [ 123.632826][ T2766] copy_process+0x57c/0x3350 [ 123.632849][ T2766] ? kasan_save_alloc_info+0x3a/0x50 [ 123.632893][ T2766] ? __cfi_copy_process+0x10/0x10 [ 123.632922][ T2766] ? __kmalloc_cache_noprof+0x23c/0x470 [ 123.632952][ T2766] ? __kasan_check_write+0x18/0x20 [ 123.632969][ T2766] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 123.632989][ T2766] vhost_task_create+0x1f7/0x3f0 [ 123.633008][ T2766] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 123.633029][ T2766] ? __cfi_vhost_task_create+0x10/0x10 [ 123.633047][ T2766] ? __cfi_vhost_task_fn+0x10/0x10 [ 123.633064][ T2766] ? __kasan_check_write+0x18/0x20 [ 123.633080][ T2766] ? mutex_lock+0x97/0x1d0 [ 123.633101][ T2766] ? __cfi_mutex_lock+0x10/0x10 [ 123.633123][ T2766] ? kernel_text_address+0xa9/0xe0 [ 123.633146][ T2766] kvm_mmu_post_init_vm+0x161/0x300 [ 123.633171][ T2766] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 123.633194][ T2766] ? _parse_integer_limit+0x195/0x1e0 [ 123.633212][ T2766] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 123.633235][ T2766] ? kstrtoull+0x13b/0x1e0 [ 123.633251][ T2766] ? kstrtouint+0x78/0xf0 [ 123.633266][ T2766] ? ioctl_has_perm+0x1bc/0x500 [ 123.633282][ T2766] ? __asan_memcpy+0x5a/0x80 [ 123.633298][ T2766] ? ioctl_has_perm+0x408/0x500 [ 123.633313][ T2766] ? has_cap_mac_admin+0xd0/0xd0 [ 123.633328][ T2766] ? __kasan_check_write+0x18/0x20 [ 123.633344][ T2766] ? mutex_lock_killable+0x97/0x1d0 [ 123.633367][ T2766] ? __cfi_mutex_lock_killable+0x10/0x10 [ 123.633389][ T2766] ? proc_fail_nth_write+0x184/0x220 [ 123.633415][ T2766] kvm_vcpu_ioctl+0xa43/0x1000 [ 123.633431][ T2766] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 123.633447][ T2766] ? __cfi_vfs_write+0x10/0x10 [ 123.633464][ T2766] ? __kasan_check_write+0x18/0x20 [ 123.633479][ T2766] ? mutex_unlock+0x90/0x240 [ 123.633506][ T2766] ? __cfi_mutex_unlock+0x10/0x10 [ 123.633531][ T2766] ? bpf_lsm_file_ioctl+0xd/0x20 [ 123.633552][ T2766] ? security_file_ioctl+0x3e/0x110 [ 123.633576][ T2766] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 123.633591][ T2766] __se_sys_ioctl+0x132/0x1b0 [ 123.633612][ T2766] __x64_sys_ioctl+0x7f/0xa0 [ 123.633631][ T2766] x64_sys_call+0x1878/0x2ee0 [ 123.633646][ T2766] do_syscall_64+0x57/0xf0 [ 123.633663][ T2766] ? clear_bhb_loop+0x50/0xa0 [ 123.633686][ T2766] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.633707][ T2766] RIP: 0033:0x7fdc8039e019 [ 123.633721][ T2766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.633735][ T2766] RSP: 002b:00007fdc7edf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.633752][ T2766] RAX: ffffffffffffffda RBX: 00007fdc80625fa0 RCX: 00007fdc8039e019 [ 123.633765][ T2766] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 123.633775][ T2766] RBP: 00007fdc7edf7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.633786][ T2766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.633797][ T2766] R13: 00007fdc80626038 R14: 00007fdc80625fa0 R15: 00007ffc0caf4778 [ 123.633811][ T2766] [ 123.633818][ T2766] Mem-Info: [ 123.658755][ T1538] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 123.662564][ T2766] active_anon:7357 inactive_anon:5 isolated_anon:0 [ 123.662564][ T2766] active_file:12959 inactive_file:8862 isolated_file:0 [ 123.662564][ T2766] unevictable:0 dirty:238 writeback:0 [ 123.662564][ T2766] slab_reclaimable:5883 slab_unreclaimable:71515 [ 123.662564][ T2766] mapped:25215 shmem:164 pagetables:1182 [ 123.662564][ T2766] sec_pagetables:3 bounce:0 [ 123.662564][ T2766] kernel_misc_reclaimable:0 [ 123.662564][ T2766] free:1520060 free_pcp:2522 free_cma:0 [ 123.813363][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.831568][ T2766] Node 0 active_anon:29428kB inactive_anon:20kB active_file:51836kB inactive_file:35448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100760kB dirty:952kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6120kB pagetables:4728kB sec_pagetables:12kB all_unreclaimable? no [ 123.833780][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.838079][ T2766] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963408kB mlocked:0kB bounce:0kB free_pcp:5244kB local_pcp:68kB free_cma:0kB [ 123.843652][ T1538] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 123.855395][ T2766] lowmem_reserve[]: [ 123.859186][ T1538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.878566][ T2766] 0 [ 123.882092][ T1538] usb 4-1: config 0 descriptor?? [ 123.904306][ T2766] 3921 3921 [ 124.240058][ T2766] Normal free:3120524kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29644kB inactive_anon:20kB active_file:51836kB inactive_file:35448kB unevictable:0kB writepending:952kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:7064kB local_pcp:5600kB free_cma:0kB [ 124.272389][ T2766] lowmem_reserve[]: 0 0 0 [ 124.276805][ T2766] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 124.292401][ T2766] Normal: 261*4kB (UME) 233*8kB (UME) 449*16kB (UME) 698*32kB (UME) 506*64kB (UME) 72*128kB (UME) 18*256kB (UME) 13*512kB (UME) 6*1024kB (M) 11*2048kB (UME) 734*4096kB (UME) = 3120428kB [ 124.311255][ T2766] 21988 total pagecache pages [ 124.315952][ T2766] 5 pages in swap cache [ 124.320169][ T2766] Free swap = 124716kB [ 124.324352][ T2766] Total swap = 124996kB [ 124.328529][ T2766] 2097051 pages RAM [ 124.334826][ T1538] hid-led 0003:1D34:000A.0008: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 124.350695][ T2766] 0 pages HighMem/MovableOnly [ 124.357151][ T2766] 352233 pages reserved [ 124.361571][ T2766] 0 pages cma reserved [ 124.362282][ T1538] hid-led 0003:1D34:000A.0008: Dream Cheeky Webmail Notifier initialized [ 124.390063][ T2766] Memory allocations: [ 124.394971][ T2766] 0 B 0 init/main.c:1477 func:do_initcalls [ 124.402306][ T2766] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 124.410408][ T2766] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 124.418202][ T2766] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 124.426266][ T2766] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 124.434279][ T2766] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 124.443679][ T2766] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 124.451734][ T2766] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 124.459651][ T2766] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 124.467793][ T2766] 0 B 0 init/initramfs.c:101 func:find_link [ 124.485000][ T36] audit: type=1400 audit(1785833742.386:381): avc: denied { ioctl } for pid=2776 comm="syz.7.805" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.537057][ T493] usb 4-1: USB disconnect, device number 34 [ 124.722270][ T1538] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 124.769745][ T2787] 9pnet_fd: p9_fd_create_tcp (2787): problem connecting socket to 127.0.0.1 [ 124.779343][ T36] audit: type=1400 audit(1785833742.692:382): avc: denied { write } for pid=2786 comm="syz.6.808" path="socket:[196826]" dev="sockfs" ino=196826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.822264][ T36] audit: type=1400 audit(1785833742.722:383): avc: denied { read } for pid=2786 comm="syz.6.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.843612][ T2791] FAULT_INJECTION: forcing a failure. [ 124.843612][ T2791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.857267][ T2791] CPU: 0 UID: 0 PID: 2791 Comm: syz.6.810 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 124.857298][ T2791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.857311][ T2791] Call Trace: [ 124.857318][ T2791] [ 124.857327][ T2791] __dump_stack+0x21/0x30 [ 124.857361][ T2791] dump_stack_lvl+0x140/0x1c0 [ 124.857389][ T2791] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.857420][ T2791] dump_stack+0x19/0x20 [ 124.857446][ T2791] should_fail_ex+0x3c2/0x510 [ 124.857469][ T2791] should_fail_alloc_page+0xec/0x110 [ 124.857495][ T2791] __alloc_pages_noprof+0x1c0/0x7e0 [ 124.857525][ T2791] ? kernel_text_address+0xa9/0xe0 [ 124.857553][ T2791] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 124.857582][ T2791] ? unwind_get_return_address+0x51/0x90 [ 124.857608][ T2791] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 124.857635][ T2791] get_free_pages_noprof+0x14/0x40 [ 124.857664][ T2791] kasan_populate_vmalloc_pte+0x4c/0x170 [ 124.857687][ T2791] __apply_to_page_range+0x7bf/0xd00 [ 124.857711][ T2791] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 124.857734][ T2791] ? __x64_sys_ioctl+0x7f/0xa0 [ 124.857758][ T2791] ? apply_to_page_range+0x60/0x60 [ 124.857781][ T2791] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 124.857803][ T2791] apply_to_page_range+0x3f/0x60 [ 124.857826][ T2791] kasan_populate_vmalloc+0x64/0x80 [ 124.857846][ T2791] alloc_vmap_area+0x1e8e/0x26f0 [ 124.857891][ T2791] ? kasan_save_alloc_info+0x3a/0x50 [ 124.857921][ T2791] ? vm_map_ram+0xdd0/0xdd0 [ 124.857948][ T2791] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 124.857970][ T2791] ? __get_vm_area_node+0x150/0x390 [ 124.857999][ T2791] __get_vm_area_node+0x1f8/0x390 [ 124.858028][ T2791] __vmalloc_node_range_noprof+0x340/0x1300 [ 124.858058][ T2791] ? copy_process+0x57c/0x3350 [ 124.858087][ T2791] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 124.858118][ T2791] ? kasan_save_alloc_info+0x3a/0x50 [ 124.858147][ T2791] ? __kasan_slab_alloc+0x73/0x90 [ 124.858172][ T2791] ? arch_dup_task_struct+0x5b/0xe0 [ 124.858201][ T2791] ? __asan_memcpy+0x5a/0x80 [ 124.858221][ T2791] dup_task_struct+0x5d6/0xd80 [ 124.858245][ T2791] ? copy_process+0x57c/0x3350 [ 124.858270][ T2791] ? _raw_spin_lock_irq+0x93/0x120 [ 124.858294][ T2791] ? copy_process+0x3350/0x3350 [ 124.858318][ T2791] ? __kasan_check_write+0x18/0x20 [ 124.858340][ T2791] copy_process+0x57c/0x3350 [ 124.858368][ T2791] ? kasan_save_alloc_info+0x3a/0x50 [ 124.858399][ T2791] ? __cfi_copy_process+0x10/0x10 [ 124.858423][ T2791] ? __kmalloc_cache_noprof+0x23c/0x470 [ 124.858446][ T2791] ? __kasan_check_write+0x18/0x20 [ 124.858465][ T2791] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 124.858489][ T2791] vhost_task_create+0x1f7/0x3f0 [ 124.858510][ T2791] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 124.858535][ T2791] ? __cfi_vhost_task_create+0x10/0x10 [ 124.858557][ T2791] ? __cfi_vhost_task_fn+0x10/0x10 [ 124.858579][ T2791] ? __kasan_check_write+0x18/0x20 [ 124.858599][ T2791] ? mutex_lock+0x97/0x1d0 [ 124.858625][ T2791] ? __cfi_mutex_lock+0x10/0x10 [ 124.858651][ T2791] ? kernel_text_address+0xa9/0xe0 [ 124.858680][ T2791] kvm_mmu_post_init_vm+0x161/0x300 [ 124.858709][ T2791] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 124.858740][ T2791] ? _parse_integer_limit+0x195/0x1e0 [ 124.858765][ T2791] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 124.858796][ T2791] ? kstrtoull+0x13b/0x1e0 [ 124.858818][ T2791] ? kstrtouint+0x78/0xf0 [ 124.858841][ T2791] ? ioctl_has_perm+0x1bc/0x500 [ 124.858864][ T2791] ? __asan_memcpy+0x5a/0x80 [ 124.858895][ T2791] ? ioctl_has_perm+0x408/0x500 [ 124.858918][ T2791] ? has_cap_mac_admin+0xd0/0xd0 [ 124.858942][ T2791] ? __kasan_check_write+0x18/0x20 [ 124.858965][ T2791] ? mutex_lock_killable+0x97/0x1d0 [ 124.858999][ T2791] ? __cfi_mutex_lock_killable+0x10/0x10 [ 124.859033][ T2791] ? proc_fail_nth_write+0x184/0x220 [ 124.859069][ T2791] kvm_vcpu_ioctl+0xa43/0x1000 [ 124.859093][ T2791] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 124.859117][ T2791] ? __cfi_vfs_write+0x10/0x10 [ 124.859142][ T2791] ? __kasan_check_write+0x18/0x20 [ 124.859166][ T2791] ? mutex_unlock+0x90/0x240 [ 124.859198][ T2791] ? __cfi_mutex_unlock+0x10/0x10 [ 124.859234][ T2791] ? bpf_lsm_file_ioctl+0xd/0x20 [ 124.859265][ T2791] ? security_file_ioctl+0x3e/0x110 [ 124.859301][ T2791] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 124.859324][ T2791] __se_sys_ioctl+0x132/0x1b0 [ 124.859354][ T2791] __x64_sys_ioctl+0x7f/0xa0 [ 124.859383][ T2791] x64_sys_call+0x1878/0x2ee0 [ 124.859405][ T2791] do_syscall_64+0x57/0xf0 [ 124.859432][ T2791] ? clear_bhb_loop+0x50/0xa0 [ 124.859464][ T2791] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.859496][ T2791] RIP: 0033:0x7fdc8039e019 [ 124.859516][ T2791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.859538][ T2791] RSP: 002b:00007fdc7edf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.859564][ T2791] RAX: ffffffffffffffda RBX: 00007fdc80625fa0 RCX: 00007fdc8039e019 [ 124.859583][ T2791] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 124.859599][ T2791] RBP: 00007fdc7edf7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.859616][ T2791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.859631][ T2791] R13: 00007fdc80626038 R14: 00007fdc80625fa0 R15: 00007ffc0caf4778 [ 124.859652][ T2791] [ 124.962451][ T1538] usb 8-1: Using ep0 maxpacket: 8 [ 125.292308][ T493] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 125.297507][ T1538] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 125.372297][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 125.374339][ T1538] usb 8-1: config 179 has no interface number 0 [ 125.420025][ T1538] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 125.431231][ T1538] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 125.442509][ T1538] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.453957][ T1538] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 125.465594][ T1538] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 125.478933][ T1538] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 125.482267][ T493] usb 2-1: Using ep0 maxpacket: 16 [ 125.488397][ T1538] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.498738][ T493] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.512742][ T2779] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 125.518946][ T493] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 37, changing to 7 [ 125.533331][ T493] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 125.542809][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.555395][ T493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.563845][ T493] usb 2-1: Product: syz [ 125.568131][ T493] usb 2-1: Manufacturer: syz [ 125.572835][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.583204][ T493] usb 2-1: SerialNumber: syz [ 125.593601][ T9] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 125.602728][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.613693][ T9] usb 4-1: Product: syz [ 125.617935][ T9] usb 4-1: Manufacturer: syz [ 125.632349][ T9] usb 4-1: SerialNumber: syz [ 125.862180][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 125.874027][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 125.896757][ T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 125.907257][ T9] usb 4-1: USB disconnect, device number 35 [ 125.923613][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.945374][ T493] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 125.952777][ T2779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.964993][ T2779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.975620][ T493] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 125.993135][ T493] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 126.001632][ T493] usb 2-1: 2:1 : sample bitwidth 60 in over sample bytes 3 [ 126.022737][ T493] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 126.034488][ T493] usb 2-1: USB disconnect, device number 45 [ 126.047885][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.482014][ T2809] kvm: pic: non byte write [ 126.487179][ T36] audit: type=1400 audit(1785833744.402:384): avc: denied { write } for pid=2808 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.402350][ T1538] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 127.430107][ T66] usb 8-1: USB disconnect, device number 3 [ 127.430159][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 127.430186][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 127.552441][ T1538] usb 7-1: device descriptor read/64, error -71 [ 127.617521][ T2831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.627397][ T2831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.713941][ T2836] FAULT_INJECTION: forcing a failure. [ 127.713941][ T2836] name failslab, interval 1, probability 0, space 0, times 0 [ 127.726907][ T2836] CPU: 1 UID: 0 PID: 2836 Comm: syz.1.826 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 127.726931][ T2836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.726943][ T2836] Call Trace: [ 127.726948][ T2836] [ 127.726955][ T2836] __dump_stack+0x21/0x30 [ 127.726982][ T2836] dump_stack_lvl+0x140/0x1c0 [ 127.727005][ T2836] ? __cfi_dump_stack_lvl+0x10/0x10 [ 127.727028][ T2836] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 127.727052][ T2836] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 127.727072][ T2836] dump_stack+0x19/0x20 [ 127.727094][ T2836] should_fail_ex+0x3c2/0x510 [ 127.727113][ T2836] should_failslab+0xac/0x100 [ 127.727134][ T2836] __kmalloc_node_noprof+0x69/0x500 [ 127.727155][ T2836] ? __kvmalloc_node_noprof+0x128/0x300 [ 127.727180][ T2836] ? __kasan_check_write+0x18/0x20 [ 127.727197][ T2836] __kvmalloc_node_noprof+0x128/0x300 [ 127.727223][ T2836] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 127.727247][ T2836] ? _raw_spin_lock+0x92/0x120 [ 127.727265][ T2836] ? __kasan_check_write+0x18/0x20 [ 127.727281][ T2836] ? enqueue_timer+0x1c5/0x4b0 [ 127.727304][ T2836] __kvm_mmu_topup_memory_cache+0x58e/0x7e0 [ 127.727330][ T2836] ? mutex_unlock+0x90/0x240 [ 127.727353][ T2836] kvm_mmu_topup_memory_cache+0x24/0x30 [ 127.727377][ T2836] kvm_mmu_load+0xa1/0x2900 [ 127.727398][ T2836] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 127.727421][ T2836] ? vmx_flush_tlb_guest+0x1d3/0x3b0 [ 127.727441][ T2836] ? kvm_apic_has_interrupt+0x77a/0x790 [ 127.727463][ T2836] ? kvm_vcpu_flush_tlb_guest+0xfe/0x220 [ 127.727490][ T2836] vcpu_run+0x4d72/0x7830 [ 127.727513][ T2836] ? kvm_sched_clock_read+0x15/0x30 [ 127.727546][ T2836] ? signal_pending+0xc0/0xc0 [ 127.727567][ T2836] ? __kasan_check_write+0x18/0x20 [ 127.727582][ T2836] ? xfd_validate_state+0x68/0x140 [ 127.727605][ T2836] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 127.727624][ T2836] ? __kasan_check_write+0x18/0x20 [ 127.727640][ T2836] ? fpregs_mark_activate+0x68/0x160 [ 127.727667][ T2836] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 127.727686][ T2836] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 127.727730][ T2836] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 127.727762][ T2836] ? _parse_integer_limit+0x195/0x1e0 [ 127.727792][ T2836] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 127.727815][ T2836] ? kstrtoull+0x13b/0x1e0 [ 127.727831][ T2836] ? kstrtouint+0x78/0xf0 [ 127.727847][ T2836] ? ioctl_has_perm+0x1bc/0x500 [ 127.727863][ T2836] ? __asan_memcpy+0x5a/0x80 [ 127.727879][ T2836] ? ioctl_has_perm+0x408/0x500 [ 127.727894][ T2836] ? has_cap_mac_admin+0xd0/0xd0 [ 127.727909][ T2836] ? __kasan_check_write+0x18/0x20 [ 127.727925][ T2836] ? mutex_lock_killable+0x97/0x1d0 [ 127.727948][ T2836] ? __cfi_mutex_lock_killable+0x10/0x10 [ 127.727971][ T2836] ? proc_fail_nth_write+0x184/0x220 [ 127.727997][ T2836] kvm_vcpu_ioctl+0xa43/0x1000 [ 127.728013][ T2836] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 127.728029][ T2836] ? __cfi_vfs_write+0x10/0x10 [ 127.728046][ T2836] ? __kasan_check_write+0x18/0x20 [ 127.728062][ T2836] ? mutex_unlock+0x90/0x240 [ 127.728084][ T2836] ? __cfi_mutex_unlock+0x10/0x10 [ 127.728108][ T2836] ? bpf_lsm_file_ioctl+0xd/0x20 [ 127.728130][ T2836] ? security_file_ioctl+0x3e/0x110 [ 127.728157][ T2836] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 127.728172][ T2836] __se_sys_ioctl+0x132/0x1b0 [ 127.728192][ T2836] __x64_sys_ioctl+0x7f/0xa0 [ 127.728211][ T2836] x64_sys_call+0x1878/0x2ee0 [ 127.728226][ T2836] do_syscall_64+0x57/0xf0 [ 127.728243][ T2836] ? clear_bhb_loop+0x50/0xa0 [ 127.728265][ T2836] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 127.728286][ T2836] RIP: 0033:0x7fbb5db9e019 [ 127.728300][ T2836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.728314][ T2836] RSP: 002b:00007fbb5eaf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.728331][ T2836] RAX: ffffffffffffffda RBX: 00007fbb5de25fa0 RCX: 00007fbb5db9e019 [ 127.728344][ T2836] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 127.728354][ T2836] RBP: 00007fbb5eaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.728365][ T2836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.728375][ T2836] R13: 00007fbb5de26038 R14: 00007fbb5de25fa0 R15: 00007ffcbc0a3488 [ 127.728389][ T2836] [ 128.161143][ T2839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 128.212274][ T1538] usb 7-1: device descriptor read/64, error -71 [ 128.249386][ T2841] kvm: pic: non byte write [ 128.256744][ T2841] netlink: 104 bytes leftover after parsing attributes in process `syz.1.828'. [ 128.322555][ T66] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 128.457870][ T1538] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 128.482222][ T66] usb 8-1: Using ep0 maxpacket: 16 [ 128.488733][ T66] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 128.496978][ T66] usb 8-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 128.507477][ T66] usb 8-1: config 0 has no interface number 0 [ 128.508037][ T2876] kvm: pic: non byte write [ 128.516691][ T66] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 128.527542][ T66] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.535755][ T66] usb 8-1: Product: syz [ 128.539933][ T66] usb 8-1: Manufacturer: syz [ 128.544580][ T66] usb 8-1: SerialNumber: syz [ 128.549975][ T66] usb 8-1: config 0 descriptor?? [ 128.555977][ T66] uvcvideo 8-1:0.105: Found Unit with invalid ID 0 [ 128.562567][ T66] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 128.568957][ T66] usb 8-1: No valid video chain found. [ 128.592252][ T1538] usb 7-1: device descriptor read/64, error -71 [ 128.642260][ T493] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 128.793336][ T493] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 128.801505][ T493] usb 2-1: config 0 has no interface number 0 [ 128.807846][ T493] usb 2-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 51520, setting to 64 [ 128.819077][ T493] usb 2-1: config 0 interface 41 has no altsetting 0 [ 128.827500][ T493] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 128.836702][ T493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.842371][ T1538] usb 7-1: device descriptor read/64, error -71 [ 128.844923][ T493] usb 2-1: Product: syz [ 128.855456][ T493] usb 2-1: Manufacturer: syz [ 128.860066][ T493] usb 2-1: SerialNumber: syz [ 128.865838][ T493] usb 2-1: config 0 descriptor?? [ 128.871117][ T2853] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 128.952410][ T1538] usb usb7-port1: attempt power cycle [ 129.079472][ T2853] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 129.273530][ T2879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.282147][ T2879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.292937][ T1538] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 129.301829][ T36] audit: type=1400 audit(1785833747.212:385): avc: denied { write } for pid=2878 comm="syz.7.833" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.326448][ T36] audit: type=1400 audit(1785833747.212:386): avc: denied { open } for pid=2878 comm="syz.7.833" path="/28/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.333853][ T1538] usb 7-1: device descriptor read/8, error -71 [ 129.351493][ T36] audit: type=1400 audit(1785833747.212:387): avc: denied { ioctl } for pid=2878 comm="syz.7.833" path="/28/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.367683][ T2880] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 129.391454][ T2880] incfs: Options parsing error. -22 [ 129.396752][ T2880] incfs: mount failed -22 [ 129.483387][ T1538] usb 7-1: device descriptor read/8, error -71 [ 129.691938][ T493] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 129.722766][ T1538] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 129.743278][ T1538] usb 7-1: device descriptor read/8, error -71 [ 129.873336][ T1538] usb 7-1: device descriptor read/8, error -71 [ 129.909423][ T493] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 129.921831][ T493] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 129.932116][ T493] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 129.941655][ T493] usb 2-1: USB disconnect, device number 46 [ 129.982294][ T1538] usb usb7-port1: unable to enumerate USB device [ 130.212201][ T36] audit: type=1400 audit(1785833748.122:388): avc: denied { remount } for pid=2896 comm="syz.3.840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 130.239140][ T36] audit: type=1400 audit(1785833748.122:389): avc: denied { create } for pid=2896 comm="syz.3.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 130.263466][ T36] audit: type=1400 audit(1785833748.122:390): avc: denied { sys_admin } for pid=2896 comm="syz.3.840" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 130.653228][ T2913] netlink: 148 bytes leftover after parsing attributes in process `syz.7.846'. [ 130.683773][ T2913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.699754][ T2913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.729883][ T36] audit: type=1400 audit(1785833748.642:391): avc: denied { cmd } for pid=2912 comm="iou-wrk-2913" path="socket:[198234]" dev="sockfs" ino=198234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 130.768796][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.776103][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.783653][ T2916] bridge_slave_0: entered allmulticast mode [ 130.790125][ T2916] bridge_slave_0: entered promiscuous mode [ 130.797259][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.804549][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.812796][ T2919] ================================================================== [ 130.820892][ T2919] BUG: KASAN: invalid-free in f_uac1_opts_c_srate_store+0x224/0x2b0 [ 130.828930][ T2919] Free of addr ffff88810b2af18f by task syz.1.847/2919 [ 130.835806][ T2919] [ 130.838159][ T2919] CPU: 1 UID: 0 PID: 2919 Comm: syz.1.847 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 130.838199][ T2919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.838217][ T2919] Call Trace: [ 130.838228][ T2919] [ 130.838239][ T2919] __dump_stack+0x21/0x30 [ 130.838284][ T2919] dump_stack_lvl+0x140/0x1c0 [ 130.838322][ T2919] ? __cfi_dump_stack_lvl+0x10/0x10 [ 130.838370][ T2919] print_address_description+0x71/0x210 [ 130.838412][ T2919] print_report+0x4a/0x70 [ 130.838448][ T2919] ? f_uac1_opts_c_srate_store+0x224/0x2b0 [ 130.838488][ T2919] kasan_report_invalid_free+0x11e/0x160 [ 130.838526][ T2919] ? f_uac1_opts_c_srate_store+0x224/0x2b0 [ 130.838564][ T2919] ? f_uac1_opts_c_srate_store+0x224/0x2b0 [ 130.838602][ T2919] check_slab_allocation+0xdf/0xf0 [ 130.838636][ T2919] __kasan_slab_pre_free+0x36/0x50 [ 130.838668][ T2919] kfree+0xf8/0x440 [ 130.838692][ T2919] ? f_uac1_opts_c_srate_store+0x224/0x2b0 [ 130.838731][ T2919] f_uac1_opts_c_srate_store+0x224/0x2b0 [ 130.838776][ T2919] ? __cfi_f_uac1_opts_c_srate_store+0x10/0x10 [ 130.838814][ T2919] ? down_read+0x7f/0xe0 [ 130.838861][ T2919] ? __cfi_down_read+0x10/0x10 [ 130.838903][ T2919] configfs_write_iter+0x32f/0x490 [ 130.838939][ T2919] ? __cfi_f_uac1_opts_c_srate_store+0x10/0x10 [ 130.838977][ T2919] vfs_write+0x762/0xfd0 [ 130.839008][ T2919] ? __cfi_vfs_write+0x10/0x10 [ 130.839036][ T2919] ? __cfi_mutex_lock+0x10/0x10 [ 130.839076][ T2919] ksys_write+0x145/0x260 [ 130.839104][ T2919] ? xfd_validate_state+0x68/0x140 [ 130.839140][ T2919] ? __cfi_ksys_write+0x10/0x10 [ 130.839164][ T2919] ? __kasan_check_write+0x18/0x20 [ 130.839197][ T2919] ? fpregs_restore_userregs+0x11c/0x260 [ 130.839230][ T2919] __x64_sys_write+0x7f/0x90 [ 130.839254][ T2919] x64_sys_call+0x271c/0x2ee0 [ 130.839274][ T2919] do_syscall_64+0x57/0xf0 [ 130.839298][ T2919] ? clear_bhb_loop+0x50/0xa0 [ 130.839327][ T2919] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.839362][ T2919] RIP: 0033:0x7fbb5db9e019 [ 130.839380][ T2919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.839400][ T2919] RSP: 002b:00007fbb5ead6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.839422][ T2919] RAX: ffffffffffffffda RBX: 00007fbb5de26090 RCX: 00007fbb5db9e019 [ 130.839439][ T2919] RDX: 0000000000000026 RSI: 0000200000000180 RDI: 000000000000000b [ 130.839454][ T2919] RBP: 00007fbb5dc3500c R08: 0000000000000000 R09: 0000000000000000 [ 130.839468][ T2919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.839482][ T2919] R13: 00007fbb5de26128 R14: 00007fbb5de26090 R15: 00007ffcbc0a3488 [ 130.839501][ T2919] [ 130.839509][ T2919] [ 130.862536][ T2916] bridge_slave_1: entered allmulticast mode [ 130.864439][ T2919] Allocated by task 2919: [ 130.868655][ T2916] bridge_slave_1: entered promiscuous mode [ 130.871734][ T2919] kasan_save_track+0x3e/0x80 [ 130.879251][ T36] audit: type=1400 audit(1785833748.722:392): avc: denied { read } for pid=2912 comm="syz.7.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.881601][ T2919] kasan_save_alloc_info+0x3a/0x50 [ 130.891229][ T36] audit: type=1400 audit(1785833748.732:393): avc: denied { add_name } for pid=2914 comm="syz.1.847" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.891484][ T2919] __kasan_kmalloc+0x96/0xb0 [ 131.178008][ T2919] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 131.184455][ T2919] kstrdup+0x4d/0x130 [ 131.188464][ T2919] f_uac1_opts_c_srate_store+0x11e/0x2b0 [ 131.194119][ T2919] configfs_write_iter+0x32f/0x490 [ 131.199251][ T2919] vfs_write+0x762/0xfd0 [ 131.203519][ T2919] ksys_write+0x145/0x260 [ 131.207876][ T2919] __x64_sys_write+0x7f/0x90 [ 131.212481][ T2919] x64_sys_call+0x271c/0x2ee0 [ 131.217167][ T2919] do_syscall_64+0x57/0xf0 [ 131.221604][ T2919] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.227527][ T2919] [ 131.229861][ T2919] The buggy address belongs to the object at ffff88810b2af180 [ 131.229861][ T2919] which belongs to the cache kmalloc-64 of size 64 [ 131.243751][ T2919] The buggy address is located 15 bytes inside of [ 131.243751][ T2919] 39-byte region [ffff88810b2af180, ffff88810b2af1a7) [ 131.256867][ T2919] [ 131.259213][ T2919] The buggy address belongs to the physical page: [ 131.265640][ T2919] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b2af [ 131.274498][ T2919] anon flags: 0x4000000000000000(zone=1) [ 131.280142][ T2919] page_type: f5(slab) [ 131.284143][ T2919] raw: 4000000000000000 ffff8881000418c0 ffffea000419d440 dead000000000005 [ 131.292743][ T2919] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 131.301335][ T2919] page dumped because: kasan: bad access detected [ 131.307765][ T2919] page_owner tracks the page as allocated [ 131.313486][ T2919] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 46, tgid 46 (kworker/u8:2), ts 3274338332, free_ts 0 [ 131.331471][ T2919] post_alloc_hook+0x37d/0x3b0 [ 131.336263][ T2919] prep_new_page+0x2d/0x180 [ 131.340799][ T2919] get_page_from_freelist+0x4aea/0x4ba0 [ 131.346377][ T2919] __alloc_pages_noprof+0x35a/0x7e0 [ 131.351600][ T2919] alloc_slab_page+0x6b/0x1e0 [ 131.356291][ T2919] allocate_slab+0x69/0x430 [ 131.360816][ T2919] ___slab_alloc+0x591/0x8c0 [ 131.365426][ T2919] __kmalloc_cache_noprof+0x2cd/0x470 [ 131.370820][ T2919] percpu_ref_init+0xe3/0x4d0 [ 131.375514][ T2919] blk_alloc_queue+0x3d8/0x5f0 [ 131.380296][ T2919] blk_mq_alloc_queue+0x18a/0x2f0 [ 131.385338][ T2919] scsi_alloc_sdev+0x75d/0xcc0 [ 131.390132][ T2919] scsi_probe_and_add_lun+0x1e9/0x3e60 [ 131.395630][ T2919] __scsi_scan_target+0x1f1/0xc20 [ 131.400675][ T2919] scsi_scan_host_selected+0x352/0x610 [ 131.406150][ T2919] do_scan_async+0x131/0x790 [ 131.410758][ T2919] page_owner free stack trace missing [ 131.416128][ T2919] [ 131.418477][ T2919] Memory state around the buggy address: [ 131.424116][ T2919] ffff88810b2af080: 00 00 00 00 03 fc fc fc fc fc fc fc fc fc fc fc [ 131.432189][ T2919] ffff88810b2af100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 131.440261][ T2919] >ffff88810b2af180: 00 00 00 00 07 fc fc fc fc fc fc fc fc fc fc fc [ 131.448338][ T2919] ^ [ 131.452680][ T2919] ffff88810b2af200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 131.460755][ T2919] ffff88810b2af280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 131.468819][ T2919] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 131.502196][ T36] audit: type=1400 audit(1785833749.402:394): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[2380]" dev="pipefs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 131.551127][ T66] usb 8-1: USB disconnect, device number 4 [ 131.563921][ T2919] Disabling lock debugging due to kernel taint [ 131.621192][ T36] audit: type=1400 audit(1785833749.522:395): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 131.652403][ T36] audit: type=1400 audit(1785833749.522:396): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.722493][ T36] audit: type=1400 audit(1785833749.522:397): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.765268][ T2868] bridge_slave_1: left allmulticast mode [ 131.770963][ T2868] bridge_slave_1: left promiscuous mode [ 131.778835][ T2868] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.804768][ T2868] bridge_slave_0: left allmulticast mode [ 131.810560][ T2868] bridge_slave_0: left promiscuous mode [ 131.822283][ T2868] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.154037][ T2868] bridge_slave_1: left allmulticast mode [ 132.159716][ T2868] bridge_slave_1: left promiscuous mode [ 132.165387][ T2868] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.172906][ T2868] bridge_slave_0: left allmulticast mode [ 132.178561][ T2868] bridge_slave_0: left promiscuous mode [ 132.184335][ T2868] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.192014][ T2868] bridge_slave_1: left allmulticast mode [ 132.197747][ T2868] bridge_slave_1: left promiscuous mode [ 132.203522][ T2868] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.210960][ T2868] bridge_slave_0: left allmulticast mode [ 132.216723][ T2868] bridge_slave_0: left promiscuous mode [ 132.222391][ T2868] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.230051][ T2868] bridge_slave_1: left allmulticast mode [ 132.235781][ T2868] bridge_slave_1: left promiscuous mode [ 132.241423][ T2868] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.249020][ T2868] bridge_slave_0: left allmulticast mode [ 132.254694][ T2868] bridge_slave_0: left promiscuous mode [ 132.260322][ T2868] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.457924][ T2868] veth1_macvtap: left promiscuous mode [ 132.463520][ T2868] veth0_vlan: left promiscuous mode [ 132.469032][ T2868] veth1_macvtap: left promiscuous mode [ 132.474932][ T2868] veth1_macvtap: left promiscuous mode [ 132.480436][ T2868] veth0_vlan: left promiscuous mode